domains / families / security / analyzing-pdf-malware-with-pdfid

analyzing-pdf-malware-with-pdfid

separate

'Analyzes malicious PDF files using PDFiD, pdf-parser, and peepdf to

When to use

• A suspicious PDF attachment has been flagged by email security or reported by a user
• You need to determine if a PDF contains embedded JavaScript, shellcode, or exploit code
• Triaging PDF documents before opening them in a sandbox or analysis environment
• Extracting embedded executables, scripts, or URLs from malicious PDF objects
• Analyzing PDF exploit kits targeting Adobe Reader or other PDF viewer vulnerabilities

When not to use

• analyzing the rendered visual content of a PDF

Skill page

Source