TWC: Malware Hunting with Mark Russinovich and the Sysinternals Tools

Download this episode

Download Video

Description

Mark provides an overview of several Sysinternals tools, including Process Monitor, Process Explorer, and Autoruns, focusing on the features useful for malware analysis and removal. These utilities enable deep inspection and control of processes, file system and registry activity, and autostart execution points. He demonstrates their malware-hunting capabilities by presenting several current, real-world malware samples and using the tools to identify and clean malware.
For more information, check out this course on Microsoft Virtual Academy:

Day:

4

Session Type:

Breakout

Code:

DCIM-B368

Room:

Grand Ballrm C

Embed

Format

Available formats for this video:

Actual format may change based on video formats available and browser capability.

    The Discussion

    Comments closed

    Comments have been closed since this content was published more than 30 days ago, but if you'd like to continue the conversation, please create a new thread in our Forums, or Contact Us and let us know.