[APAC] Dissecting How Follina Tricks Word Into Running Arbitrary Code

In this webinar, you’ll see how Follina works starting with an innocently looking Word “document” that has no macros. Thankfully this particular zero-day is patched. We will also discuss strategic methods for dealing with the risk of Office documents and all the other highly functional content users open and process every day. As just one example of the defense scenarios we will explore is the highly effective method of analyzing parent-child processes. But there’s plenty of other detection controls to consider. Threat researchers Brian Coulson and Dan Kaiser, from LogRhythm, will be joining me and they will take us through the detection mitigations they have developed for Follina and we’ll discuss how to extend them to as yet undiscovered attacks.