Keeping an Eye on Dangerous Python Modules, (Fri, Jun 11th)

This article has been indexed from SANS Internet Storm Center, InfoCON: green

With Python getting more and more popular, especially on Microsoft Operating systems, it's common to find malicious Python scripts today. I already covered some of them in previous diaries[1][2]. I like this language because it is very powerful: You can automate boring tasks in a few lines. It can be used for offensive as well as defensive purposes, and… it has a lot of 3rd party “modules” or libraries that extend its capabilities. For example, if you would like to use Python for forensics purposes, you can easily access the registry and extract data:

Read the original article: Keeping an Eye on Dangerous Python Modules, (Fri, Jun 11th)