Presented by
Brian Coulson, Dan Kaiser, and Randy Franklin Smith
Anatomy of a Zero Day: How Follina Tricks Word Into Running Arbitrary Code
About this talk
In this webinar, you’ll see how Follina works starting with an innocently looking Word “document” that has no macros. Thankfully this particular zero-day is patched.
We will also discuss strategic methods for dealing with the risk of Office documents and all the other highly functional content users open and process every day.
As just one example of the defense scenarios we will explore is the highly effective method of analyzing parent-child processes. But there’s plenty of other detection controls to consider. Threat researchers Brian Coulson and Dan Kaiser, from LogRhythm, will be joining me and they will take us through the detection mitigations they have developed for Follina and we’ll discuss how to extend them to as yet undiscovered attacks.
Exabeam
82474 subscribers67 talks
Better Security. Faster Results.
Exabeam is a leader in intelligence and automation that powers security operations for the world’s smartest companies. As a global cybersecurity leader, Exabeam provides industry-proven, security-focused, and flexible solutions for faster, more accurate threat detection, investigation, and response (TDIR). Cutting-edge technology enhances security operations center performance, optimizing workflows and accelerating time to resolution. With consistent leadership in AI innovation and a proven track record in security information and event management (SIEM) and user behavior analytics, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline operations. Learn more at www.exabeam.com.