Detecting Obfuscated Command-Lines With A Large Language Model
Cisco News, Tuesday, November 21,2023
In the security industry, there is a constant, undeniable fact that practitioners must contend with: criminals are working overtime to constantly change the threat landscape to their advantage.
Their techniques are many, and they go out of their way to avoid detection and obfuscate their actions. In fact, one element of obfuscation - command-line obfuscation - is the process of intentionally disguising command-lines, which hinders automated detection and seeks to hide the true intention of the adversary's scripts.