PDF Object Streams, (Mon, Nov 11th)
SANS Internet Storm Center, InfoCON: green 2024-11-11
Summary:
The first thing to do, when analyzing a potentially malicious PDF, is to look for the /Encrypt name as explained in diary entry Analyzing an Encrypted Phishing PDF.