Tag Info

New answers tagged

2

It's an arms-race! Theoretically, you cannot inspect a system from within itself. You need to be one level above: if you want to inspect user-space malware, you need to be in kernel land. If you want to inspect kernel malware, be in the hypervisor. Practically, for your case, you can try to change common analysis tools to avoid detection by the malware. For ...



Top 50 recent answers are included