Talos Takes

How are attackers using malicious drivers in Windows to stay undetected?

February 02, 2024 Cisco Talos Episode 171
Talos Takes
How are attackers using malicious drivers in Windows to stay undetected?
Show Notes

Chris Neal from Talos Outreach joins the show today to talk about his research into the ways adversaries are using malicious drivers on Windows to spread malware. He recently launched a new series on the Talos blog about the basics of drivers and how security researchers can reverse engineer them to learn more about attacker TTPs and develop new detection content. Chris discusses when he first spotted this type of attack, what advantages it presents for the attacker and the other aspects of the research he plans to dive into.