• Posts Tagged ‘pdf+x-ray’

    ClassyPDF Tool Up for Grabs

    by  • July 31, 2012 • Uncategorized

    Back at the tail end of April I had posted about data mining PDF data in order to classify whether or not a document were malicious. In the post I had talked about data and an API, but never released the tool out to the public. It has been a few m...

    Read more →

    Data Mining + Malware = Improved Analysis

    by  • April 30, 2012 • Uncategorized

    Over the past few weeks I have been talking with different analysts, programmers and RE folks about the future of malware analysis and how we combat changes in attacks. Ripping apart binaries and developing signatures based on TTPs doesn’t scale (...

    Read more →

    PDF X-RAY Without Storage

    by  • November 10, 2011 • Uncategorized

    If you have uploaded a very large document to PDF X-RAY (hosted or local) then you may have noticed that processing doesn't work out too well. If the generated text is over a certain size then MongoDB refuses to store it. As demonstrated before, y...

    Read more →

    PDF X-RAY Portable VM

    by  • October 19, 2011 • Uncategorized

    I am bit late in posting this, but it is better now than not at all. Available for download is the portable version of PDF X-RAY. This virtual machine is less than 2Gb making it pretty easy to transfer around between setups and host on a local com...

    Read more →

    Brucon Workshop Slides

    by  • September 21, 2011 • Uncategorized

    Attached are my slides from the Brucon workshop. I am sad to say that it didn't have as much work as I would have liked, but I think some people still got some value out of it. Last minute open sourcing of PDF X-RAY was great, but added to the cha...

    Read more →