BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: pymsi: Interactive MSI Installer Analysis in Python 
 and the\n   Browser\n   Tags: Intro/Beginner | DEF CON Demo Labs | AppSec 
 | Defense/Blue Team\n   | Malware | Threat Intel/Hunting | DEF CON Demo La
 bs\n   When: Saturday\, Aug 8\, 11:00 - 11:45 PDT\n   Where: LVCCW Level 1
  Hall 3 902 (Demo Labs Track 6) - [1]Map\n\n   Description:\n\n   pymsi is
  a pure-Python library for parsing\, analyzing\, and extracting\n   files 
 from Windows installer (MSI) packages\, without relying on native\n   Wind
 ows APIs or tooling. It provides direct access to MSI database\n   tables\
 , embedded binary streams\, and installer metadata\, enabling\n   security
  researchers to inspect installer behavior and extract files\n   from MSI 
 installers.\n\n   We will demonstrate its ability to safely tear apart mal
 icious MSI\n   droppers\, dump internal database tables\, and extract embe
 dded payloads\n   without risking accidental execution. Attendees will see
  how the CLI\n   and Python API can be used to triage files and integrate 
 it into\n   automated analysis pipelines\, including how it has been integ
 rated\n   into other open source tools to extract embedded payloads and id
 entify\n   malicious CustomAction behaviors.\n\n   Because it is written e
 ntirely in Python\, it runs seamlessly on any OS\n   with a Python interpr
 eter\, including web browsers. The demo will\n   showcase the online MSI v
 iewer\, a client-side tool powered by Pyodide\n   that gives pymsi a famil
 iar lessmsi-style UI for working with MSI\n   installers from any device w
 ith a web browser. Demos will also show\n   new security analysis features
  for identifying suspicious installer\n   behaviors and inspecting content
 s of embedded binary streams within a\n   browser.\n\n   SpeakerBio:  Ryan
  "Nightlark" Mast\n\n   Ryan is a software engineer working on open source
  projects to make\n   the electric grid more reliable. His interests inclu
 de software\n   security\, niche video games\, tearing apart "smart" devic
 es\, and\n   reverse engineering audio/video hardware used in live product
 ions.\n\n   Links:\n       GitHub - [2]https://github.com/nightlark/pymsi\
 n   '\n\n   1. #LVCCW_Level1_Hall3\n   2. https://github.com/nightlark/pym
 si\n\n\n
DTEND:20260808T184500Z
DTSTART:20260808T180000Z
LOCATION:Demo Labs - LVCCW Level 1 Hall 3 902 (Demo Labs Track 6)
SUMMARY:pymsi: Interactive MSI Installer Analysis in Python and the Browser
END:VEVENT
END:VCALENDAR