When you’re performing a covert penetration test, nothing is more embarrassing than being caught by antivirus software. This detail can be easily overlooked, but if you don’t make plans to evade detection, your target will quickly notice that something fishy is going on. In this chapter, we’ll cover ways to evade antivirus and intrusion detection systems.
Most antivirus software uses bits of data and rules called signatures to identify aspects of malicious code present in a sample. These signatures are loaded into antivirus engines, which scan disk storage and running processes for matches. When a match is found, most ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
