Huntress hack_it 2022 Recap Covers DLL Hijacking and Hacker Tradecraft
Summary
Huntress recaps hack_it 2022 sessions on cybercrime, AI claims in security, DLL hijacking techniques, using Process Monitor, and a live exercise involving vulnerability discovery and privilege escalation.
Key points
- A session discussed how easily accessible tools can enable people with limited hacking experience to conduct cybercrime.
- The recap lists missing-DLL loading, search-order hijacking, DLL replacement, search-path manipulation, and relative-path DLL hijacking.
- The event demonstrated using Sysinternals Process Monitor to observe active processes.
- A session described developing a payload, escalating privileges, and compromising a target while exploring vulnerabilities in remote monitoring and management tools.
- Panelists argued that AI and automation can assist security work but are not a universal replacement for human creativity.
Article Details
- Topic
- Recap of hack_it 2022 cybersecurity education sessions on cybercrime, security marketing claims, AI in cybersecurity, and DLL hijacking.
People
Vendors
Products
Tools
Process MonitorFrom there, we explored a tool found in the sysinternals suite known as Process Monitor. While it can get overwhelming fast, it’s a great tool to help you gain visibility into the active processes running in yourProcmonAnd, of course, we got our hands dirty with a live demonstration of ProcMon in action.