[Autogenerated] awesome hope.
Enjoy the demos, and I hope you got excited about evading detection systems.
But before we go,
I want to give some tips on how to be successful in your red team engagement.
First.
If you really want to make sure you not be detected and if you have enough time,
right your own exploitation tools.
Most of the end of our solutions a signature based.
So if you use your own script, you have more chances of success.
But I know it is really hard to write your own tools
when you have tight deadlines.
And that's why you have been vocal physician, too.
And that's why you're watching this course.
So if you're using obfuscation two, or even if you're right in your own quote,
it is really important to understand how the detection
magnus in your target government.
And this means not only the interval solution,
but also if the client has a host I PS and Natural
detection two or even a seam solution.
If you gather this information,
it can then replicate out of detection mechanism of declines in your own lab,
and in this way it becomes really used to test your obfuscated script.
Also, when testing obfuscated script in your own lab,
take a look on the logs rented by the windows and by the detection tools.
Make sure the logs are not showing suspicious thing,
because if the client has a seam solution,
you trigger alerts.
Also,
another interesting tip here is to use the minimum required
obfuscation for this crew to work and bypass detection.
As you saw in the demos,
it is really easy to apply multiple sophistication techniques,
but from my experience, when I skip it has too many obfuscation bikinis.
The inter virus may alert that's something so species happening.
For example, if you convert the court to binary,
then include the payload and then do some actual recording,
the antivirals may say that is a species.
He's a normal, softer would never do that.
So on use enough obfuscation to be in there.
The raider.
If you want to learn more about the invoke office cation,
too, you should check its official documentation on.
In there, you find several examples and instructions on how to obfuscate cold.
You can take this link mentally,
or you can go to the exercise files for this course open the pdf
for this light and click on the link there.
Also,
if you got interested in defense evasion and you want to learn the details on
how these two works the altar of this to give a very interesting talk in the
activity conference in 2016 His talk Daniel explains every single detail of the
two and how each obfuscation technique works.
Now we heard the defense side.
You may be wondering how to detect when people using such tooth
the same person that developed invoke obfuscation to developed
another two called Revoke Obfuscation, which is able to detective,
was scary cold and even deliver skate someone of code.
Also, if you're wondering how to protect yourself in your company,
a good start is to use an entity Mauer's technology that attacked money.
Just quote based on behavior instead of signatures.
And if you want to get really technical, it's a really good black hat.
Talk about obfuscation detection,
and there you see some really smart people talking about using
mathematical models to detect malicious code and obfuscated code.
So that's it.
That's the end of the course.
I hope that now you start obfuscating your code more often.
In my opinion,
this kind of technique is what differentiates our script
kid from a real red team specialist.
So I hope you enjoy this course, and I see you soon.