In this awesome presentation, Monnappa explained the concept of Rootkits, types of Rootkits, Memory Forensics. He demonstrated various stealth techniques used by the TDSS Rootkit and showed how to identify its presence and understand its capabilities and various functionality using memory forensics. Presentation: Video Demo:
In this presentation, Raghav Pande explained various self defending mechanisms of BetaBot. He also presented unpacking, hooking and injection methods of this malware using illustrative screenshots. Presentation:
Rootkit is the next level in malwares. Rootkits mostly compromise the kernel side of the operating system. So they are some of the most sophisticated piece of codes you will see in malwares. Check the reference section for additional material. We highly recommend reading of “Rootkit Arsenal” book.