Is anyone pursuing entry point analysis of PE files, particularly files that have been obfuscated/compressed/encrypted?

Does anyone have links to publicly available information on this topic?

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

[ reply ]