D3FEND 技术详情

D3-EFA

D3-EFA

Emulated File Analysis

定义

Emulating instructions in a file looking for specific patterns.

父技术
子技术
关联构件
DocumentFile
Document File

A document is a written, drawn, presented or recorded representation of thoughts. An electronic document file is usually used to describe a primarily textual file, along with its structure and design, such as fonts, colors and additional images.

ExecutableFile
Executable File

In computing, executable code or an executable file or executable program, sometimes simply an executable, causes a computer "to perform indicated tasks according to encoded instructions," as opposed to a data file that must be parsed by a program to be meaningful. These instructions are traditionally machine code instructions for a physical CPU. However, in a more general sense, a file containing instructions (such as bytecode) for a software interpreter may also be considered executable; even a scripting language source file may therefore be considered executable in this sense. The exact interpretation depends upon the use; while the term often refers only to machine code files, in the context of protection against computer viruses all files which cause potentially hazardous instruction

语义关系
出向analyzesDocument File
出向analyzesExecutable File
出向kb referenceReference - Network-level polymorphic shellcode detection using emulation