Static Analyzers In class projects

Homework Tip:

Download NSA's Ghidra. It will make solving homework 4 much easier.

Today will focus on using ClamAV and Yara.
Download the zipped file from here
The write signatures for to find each of the following in both ClamAv and Yara

All the PDF files of version type 1.4
All the PDF files of version type 1.5 and 1.7
All the Windows Exe files
All the Linux Elf files
All the files that contain "flag{}"
Find the number of duplicate files
Find the UPX packed executables

Video of Class:

No video for in class project days.