Malware Hunting with Microsoft Sysintenals Tools | TryHackMe

[@keshavmahoorkar8117]

Please make video on malware hunting in Crowdstrike EDR tool

[@akashupadhyayawow]

Best vedio 😍😍

[@Randomrel]

Thank you for this video. its very good and easy to understand

[@cyberwarriorall6260]

thank you sir

[@grand8295]

awesome video, what other sources would you recommend us to start learning more of these knowledge

[@MotasemHamdan]

Letsdefend.io

[@kualder]

the best video, thanks,

[@cyberwarriorall6260]

Hi Sir, I have query.. When Handling incident if we identify the process on proc exp based on virus total score, company name etc.. then next step is to suspend then kill and then open autorun to check and reg entries and just uncheck them will do or do we need to delete or use jump to entry and remove the value.
Just building the connection of steps during IR.
Thank you.

[@MotasemHamdan]

All the steps you mentioned are correct. Don't forget to check the registry, temp files and %appdata% folder.

[@jameezybreezy9030]

you have a knack for teaching

[@piratimir1101]

Imagine a malware manipulating your systinternal tools after you add it to the PATH.

[@MotasemHamdan]

Yup !

[@piratimir1101]

@@MotasemHamdan Do you recommend any material to read on the information you shared in your presentation?

[@piratimir1101]

Well, what source?

[@MALWARELATINO]

Txh 😳

[@hamdancybersecurity2029]

1st🔥🔥🔥