Exploring DLL Hijacking Using Cortex XDR Analytics

Thursday, June 13, 2024 | 10 AM PT / 1 PM ET

John, Dynamic-link library (DLL) hijacking is one of the oldest yet most prevalent techniques used by threat actors nowadays. Renowned for its simplicity yet effectiveness, it enables attackers to execute malicious code in a stealthy manner, presenting a substantial detection challenge.

This webinar offers a comprehensive exploration of DLL hijacking. We will cover the theoretical background and the commonly used variations seen in the wild. We will discuss strategies to detect DLL hijacking attacks at scale efficiently, and how we leveraged these strategies using Palo Alto Networks' Cortex XDR Analytics to uncover advanced persistent threat (APT) and cybercrime operations. Finally, participants will also learn about proactive measures to mitigate the attack surface created by this technique.