Anti-Virus Evasion of Security Control Selections

In this series of articles about penetration testing, Andy Swift sheds some light on some of the more interesting techniques, with a focus on techniques that can be combined with basic tools to take an ordinary attack that few steps further. The first technique is Anti-Virus Evasion, covering topics such as evading signature-based systems, evading heuristic/behavioural based systems and finally using the operating system against itself to remain undetected. Andy includes a step by step on how to do each of these things, with a somewhat detailed (but not over the top) explanation of how these techniques work and why etc. how to improve the security control framework value.