[New post] FLARE Script Series: Querying Dynamic State Using The FireEye Labs Query-Oriented Debugger (Flare-Qdb)

Malware Devil posted: "Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for querying and altering dynamic binary state conveniently, it" Malware Devil FLARE Script Series: Querying Dynamic State Using The FireEye Labs Query-Oriented Debugger (Flare-Qdb) Malware Devil Jan 4 Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for querying and altering dynamic binary state conveniently, iteratively, and at scale. flare-qdb works on Windows and Linux, and can be obtained from the flare-qdb github project. Motivation Efficiently understanding complex or obfuscated malware frequently entails debugging. Often, the linear process of following the program counter raises questions about parallel or previous register states, state Manage your email settings or unsubscribe. Trouble clicking? Copy and paste this URL into your browser: https://devi.ly/flare-script-series-querying-dynamic-state-using-the-fireeye-labs-query-oriented-debugger-flare-qdb/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110