D3 Internals + Dynamic Analysis Flashcards

1

Which tool captures system activity in real-time, including file and registry operations?

2

Which tool is a feature-rich task manager that provides detailed information about processes, DLLs, and handles?

3

What does the Strings tool do?

4

What does Autoruns display?

5

What is the primary purpose of Sysinternals suite of tools?

6

Which feature of Process Explorer is helpful in detecting unsigned code, a common trait in malware?

7

Autoruns can be used to monitor network connections made by malware

8

TCPView allows users to close established TCP/IP connections

D3 Internals + Dynamic Analysis