Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator

In this presentation, we'll look at Defender's emulator for analysis of potentially malicious Windows PE binaries on the endpoint. To the best of my knowledge, there has never been a conference talk or publication on reverse engineering the internals of any antivirus binary emulator before. By Alexei Bulazel Full abstract and materials: https://www.blackhat.com/us-18/briefi...