DEF CON Safe Mode Blue Team Village - Holger Unterbrink - Reversing With Dynamic Data Resolver

DDR is an IDA plugin that instruments binaries using the DynamoRIO framework. In this presentation we will show you best practices how to reverse engineer malware with DDR. The talk will discuss the internals of DDR and show you by demonstration, the advantages of the tool.