Hello and welcome back.
In this video, we are going to talk about PDAF key words.
So what is bedcovers, PIDF keywords, those actions, elements that describe how P.D.A works.
In a previous video, we saw that a PDF file consists of various sections A, Section B, an object.
And within each object we find keywords.
So some of these keywords are listed here.
For example, the open action keyword or abbreviated is a function of which is to open an action to
execute a script, for example.
The other one is JavaScript, abbreviated as.
So this is a link to the JavaScript that will run when the PDF is open.
Another one will be names.
So names are, for example, maybe names of files.
And this is important to identifying additional files that may be referred to by the PDA documents it
so that we also have the embedded file Keywood, which will show where are the other files embedded
within PDM document itself and which might contain scripts.
Then you also have the you are ikki with or some form keyword and these could be links to other.
You are else on the Internet for the PDAF to go and download the second stage or additional to switch
the malware needs to run.
And then we also have the launch keyword, which is similar to the open action keyword.
And this launch keyword can be used to run scripts embedded within the email where the PDF file set
out to run some new additional files that has been downloaded by the PDA.
So some of the tools that we'll be using will automatically scan for all of these keywords here.
So you do not have to memorize them.
So that concludes this lecture.
Thank you very much for watching.