Navigating the Antivirus Labyrinth – a Game of Cat and Mouse
At the time of writing, antivirus software employs various techniques to determine whether a file contains harmful code. These methods encompass static detection, dynamic analysis, and behavioral analysis for more sophisticated endpoint detection and response (EDR) systems. In this chapter, you will elevate your malware development expertise by mastering techniques that can bypass AV/EDR systems.
In this chapter, we’re going to cover the following main topics:
- Understanding the mechanics of antivirus engines
- Evasion static detection
- Evasion dynamic analysis
- Circumventing the Antimalware Scan Interface (AMSI)
- Advanced evasion techniques
