Presentation: Understanding & avoiding AV detection

A while ago I gave a presentation / workshop on evading anti virus using multiple techniques. This was the agenda:

• Common pitfalls
• Lab prerequisites
• AV detection methods
• Signature evasion
• Heuristics evasion
  • Packers / Crypters / etc
  • Payload transformations
• Building your own evasion
  • Meterpreter loaders
  • Shellcode executers

You can download the slides here, keep in mind that the goal of the presentation / workshop was to give the attendees a broad overview and some pointers so that they could continue researching the subject themselves. A last addition to the presentation is a POC script to split files while maintaining a valid PE.