Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may obfuscate then dynamically resolve API functions called by their malware in order to conceal malicious functionalities and impair defensive analysis.
Adversaries may attempt to make a payload difficult to analyze by removing symbols, strings, and other human readable information.
Adversaries may embed payloads within other files to conceal malicious content from defenses.
Adversaries may obfuscate content during command execution to impede detection.
Adversaries may store data in "fileless" formats to conceal malicious activity from defenses.
Adversaries may smuggle commands to download malicious payloads past content filters by hiding them within otherwise seemingly benign windows shortcut files.
Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
Adversaries may utilize polymorphic code (also known as metamorphic or mutating code) to evade detection.
Adversaries may use compression to obfuscate their payloads or files.
Adversaries may use junk code / dead code to obfuscate a malware’s functionality.