BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: pymsi: Interactive MSI Installer Analysis in Python 
 and the\n   Browser\n   Tags: Intro/Beginner | DEF CON Demo Labs | AppSec 
 | Defense/Blue Team\n   | Malware | Threat Intel/Hunting | DEF CON Demo La
 bs\n   When: Friday\, Aug 7\, 15:00 - 15:45 PDT\n   Where: LVCCW Level 1 H
 all 3 902 (Demo Labs Track 6) - [1]Map\n\n   Description:\n\n   pymsi is a
  pure-Python library for parsing\, analyzing\, and extracting\n   files fr
 om Windows installer (MSI) packages\, without relying on native\n   Window
 s APIs or tooling. It provides direct access to MSI database\n   tables\, 
 embedded binary streams\, and installer metadata\, enabling\n   security r
 esearchers to inspect installer behavior and extract files\n   from MSI in
 stallers.\n\n   We will demonstrate its ability to safely tear apart malic
 ious MSI\n   droppers\, dump internal database tables\, and extract embedd
 ed payloads\n   without risking accidental execution. Attendees will see h
 ow the CLI\n   and Python API can be used to triage files and integrate it
  into\n   automated analysis pipelines\, including how it has been integra
 ted\n   into other open source tools to extract embedded payloads and iden
 tify\n   malicious CustomAction behaviors.\n\n   Because it is written ent
 irely in Python\, it runs seamlessly on any OS\n   with a Python interpret
 er\, including web browsers. The demo will\n   showcase the online MSI vie
 wer\, a client-side tool powered by Pyodide\n   that gives pymsi a familia
 r lessmsi-style UI for working with MSI\n   installers from any device wit
 h a web browser. Demos will also show\n   new security analysis features f
 or identifying suspicious installer\n   behaviors and inspecting contents 
 of embedded binary streams within a\n   browser.\n\n   SpeakerBio:  Ryan "
 Nightlark" Mast\n\n   Ryan is a software engineer working on open source p
 rojects to make\n   the electric grid more reliable. His interests include
  software\n   security\, niche video games\, tearing apart "smart" devices
 \, and\n   reverse engineering audio/video hardware used in live productio
 ns.\n\n   Links:\n       GitHub - [2]https://github.com/nightlark/pymsi\n 
   '\n\n   1. #LVCCW_Level1_Hall3\n   2. https://github.com/nightlark/pymsi
 \n\n\n
DTEND:20260807T224500Z
DTSTART:20260807T220000Z
LOCATION:Demo Labs - LVCCW Level 1 Hall 3 902 (Demo Labs Track 6)
SUMMARY:pymsi: Interactive MSI Installer Analysis in Python and the Browser
END:VEVENT
END:VCALENDAR