@AGDCservices profile picture
AGDC Services @AGDCservices

A computer security firm providing malware analysis training and consulting services. Specializes in teaching complicated RE topics in an understandable manner.

Joined November 2019
  • Tweets 645
  • Following 73
  • Followers 619
21 Photos and videos
Pinned Tweet
AGDC Services@AGDCservices
7 Dec 2020
#CyberMentoringMonday #dfir #malware analysis tip: If you want to get started learning to reverse engineer malware but don't know where to start, here's a post full of resources for everything you need to begin your journey. agdcservices.com/blog/resour…

2
12
34
AGDC Services retweeted
Ahmet Bilal Can 🦔@0xabc0
27 Oct 2022
control flow unflattening of an android rasp sdk eybisi.run/Control-Flow-Unfl…

Control Flow Unflattening

TargetRecently I have analyzed a RASP solution called Approov. Altough there are some novel detection techniques, overall it’s not that interesting. Instead I will focus on obfuscation part of native

eybisi.run
2
34
122
AGDC Services retweeted
Hex-Rays SA
@HexRaysSA
21 Sep 2022
Appcall is not widely known but a very powerful feature in IDA's debugger. In addition to the article by @vinopaljiri, check out these examples 👉 hex-rays.com/blog/practical-… #IDA #IDAPro #Debugger #ReverseEngineering

Practical Appcall examples – Hex Rays

Last week we introduced the new Appcall feature in IDA Pro 5.6. Today we will talk a little about how it’s implemented and describe some of the uses of App

hex-rays.com
Check Point Research
@_CPResearch_
21 Sep 2022
For a reverse engineer, the ability to directly call a function from the analyzed binary can be a shortcut that bypasses a lot of grief. In this article, we explore and compare 3 ways of invoking functions: IDA Appcall, Dumpulator, and Unicorn Engine. research.checkpoint.com/2022…
13
40
AGDC Services retweeted
Mike Hunhoff@mehunhoff
25 Aug 2022
🚨 Today we're excited to release Ghidrathon, a Ghidra extension that adds modern Python 3 scripting (including Python 3.10) to Ghidra! Blog 👉 mandiant.com/resources/blog/… GitHub 👉 github.com/mandiant/Ghidrath…
5
218
552
AGDC Services retweeted
Binni Shah
@binitamshah
27 Jul 2022
How to analyze Linux malware – A case study of Symbiote : cybergeeks.tech/how-to-analy… credits @GeeksCyber
31
96
AGDC Services retweeted
Thomas Roccia 🤘
@fr0gger_
4 Jun 2022
Very cool resource to start analysis MacOS malware by @SentinelOne. From configuring a safe analysis environment to Mach-O binary analysis and dynamic analysis!🙂#malware #macos #reverseengineering go.sentinelone.com/rs/327-MN…
2
73
220
AGDC Services retweeted
Patrick Wardle
@patrickwardle
5 Aug 2020
Excited to announce my new book series: "The Art Of Mac Malware" taomm.org/ 📚 🆓 100% free online 📝 Peer-reviewed & open for comments When published, proceeds will support our #OBTS conference & charity efforts 😍 #SharingIsCaring

The Art of Mac Malware

Books about Mac malware (by Patrick Wardle)

taomm.org
31
510
1,425
AGDC Services retweeted
Alexandre Borges
@ale_sp_brazil
9 May 2022
I started writing a new series about C reversing (mainly focused on C Standard Library --containers, iterators and templates, in general) using short and educational programs. Of course, the reversing task is slightly harder... #reversing #reverseengineering #cpp #idapro
5
70
348
AGDC Services retweeted
Binni Shah
@binitamshah
10 May 2022
How SHA-256 Works Step-by-Step : blog.boot.dev/cryptography/h… credits @bootdotdev

2
34
73
AGDC Services retweeted
Binni Shah
@binitamshah
8 May 2022
Reverse-Engineering : A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures : github.com/mytechnotalent/Re… credits @mytechnotalent

GitHub - mytechnotalent/Reverse-Engineering: A FREE comprehensive reverse engineering tutorial...

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. - mytechnotalent/Reverse-Engineering

github.com
7
299
1,002
AGDC Services retweeted
Mr. Rc
@rcx86
10 Apr 2022
Exploit Development Tutorials for Windows and Linux. samsclass.info/127/ED_2020.s… #infosec
35
702
2,068
AGDC Services retweeted
reverseame@reverseame
8 Apr 2022
Reversing Common Obfuscation Techniques ferib.dev/blog.php?l=post/Re…

1
152
395
AGDC Services retweeted
Mr. Rc
@rcx86
13 Mar 2022
Beginner Reverse Engineering Tutorials: legend.octopuslabs.io/sample…
29
666
1,876
If you want to increase your #dfir #malware analysis skills by analyzing Bootkits, here's a github repo with a number of samples you can download for practice github.com/hardenedvault/boo… #cybersecurity #infosec

GitHub - hardenedvault/bootkit-samples: Bootkit sample for firmware attack

Bootkit sample for firmware attack. Contribute to hardenedvault/bootkit-samples development by creating an account on GitHub.

github.com
5
9
Read a #dfir #malware analysis report about a IcedID Loader document to increase your analysis skills forensicitguy.github.io/anal… #cybersecurity #infosec

Analyzing an IcedID Loader Document

In this post I’m going to walk through an analysis of a malicious document that distributes and executes an IcedID DLL payload.

forensicitguy.github.io
1
4
5
Here's a #dfir #malware analysis report on a new Zloader campaign exploiting Microsoft's Signature Verification to read and learn about research.checkpoint.com/2022… #cybersecurity #infosec

Can You Trust a File’s Digital Signature? New Zloader Campaign exploits Microsoft’s Signature...

Research by: Golan Cohen Introduction Last seen in August 2021, Zloader, a banking malware designed to steal user credentials and private information, is back with a simple yet sophisticated infect...

research.checkpoint.com
6
7
Here's info explaining an Office RCE exploit, CVE-2021-40444, you can learn about in case you see it used in your #dfir #malware analysis billdemirkapi.me/unpacking-c… #cybersecurity #infosec

Unpacking CVE-2021-40444: A Deep Technical Analysis of an Office RCE Exploit

In the middle of August 2021, a special Word document was uploaded to VirusTotal by a user from Argentina. Although it was only detected by a single antivirus engine at the time, this sample turned...

billdemirkapi.me
8
Here's a post discussing how to analyze golang malware which also provides a tool to help that you can add to your #dfir #malware analysis toolbox sentinelone.com/labs/alphago… #cybersecurity #infosec

AlphaGolang | A Step-by-Step Go Malware Reversing Methodology for IDA Pro

SentinelLabs sets off to dispel the myth that Go malware is hard to reverse engineer. This suite of IDApython scripts will set you well on your way

sentinelone.com
6
9
Here's a #dfir #malware analysis report on Pysa ransomware to read and learn about blog.cyble.com/2021/11/29/py… #cybersecurity #infosec
1
3
Here's a #dfir #malware analysis report on a linux rootkit you can read and learn from darrenmartyn.ie/2021/11/29/a… #cybersecurity #infosec
6
6
Load more