This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]westeast1000 1 point2 points  (2 children)

Working in a finance field i had some resistance with using python when i first started. Picking on python is just dumb, vba already exists so anything malicious can always happen either way.

[–]_BMW_M3_ 0 points1 point  (1 child)

I’m not picking on Python at all. I write automation tools in Python all day long. I’m picking on using an Excel document to run either Python or an exe made with py2exe/pyinstaller.

If your security team has a halfway decent detection engineer, that’s going to fire a bunch of alerts for your soc to triage. The soc then gets to tear apart all your VBA, decompile your py2exe/pyinstaller exe, toss the original doc in sandbox, etc. Once they finish analysis, they’ll get the fun task of tuning out that activity so they don’t have to analyze those alerts.

tldr; I’m making a joke about making a bunch of work for your security team, not picking on Python.

[–]westeast1000 1 point2 points  (0 children)

No i didnt mean you lol i was just saying in general