Execution Guardrails & Environmental Keying (Defence Evasion)

In this video we'll be exploring how to attack, detect and defend against Execution Guardrails & Environmental Keying. These techniques allow an attacker to write stealthy malware which only triggers on specifically-intended target victim machines so as to try and avoid detection, or to fustrate analysis within a sandbox.

If you find the video useful please do give it a like, and consider subscribing if you want more of this sort of content. Drop a note in the comments if there’s anything you think I missed, or if you have a good idea of what topic I should cover next.

Further reading/watching:
Mitre ATT&CK on Execution Guardrails: https://attack.mitre.org/techniques/T...
Mitre ATT&CK on Environmental Keying: https://attack.mitre.org/techniques/T...
SANS Holiday Hack 2018: https://holidayhackchallenge.com/2018/
Ransomware Recovery Challenge Solution:    • Holiday Hack 2018 - 10/11 - KringleCon Obj...  
Symantec Paper on Stuxnet: https://web.archive.org/web/*/http://...

Audio Credits (licensed under CC0):
Intro/Outro Music by Flavio Concini (https://freesound.org/people/Greek555/)
Transition audio: "Ethereal Woosh" by Newagesoup (https://freesound.org/people/newagesoup/)

Graphics credits:
Icons: Sketchy Collection by Ralf Schmitzer, licensed under CCBY (https://thenounproject.com/ralfschmit...)

Timestamps:
0:00 Intro
1:19 Attack
2:16 Detect
6:21 Defend