Karton Gems 3: Malware extraction with malduck

This tutorial introduces malduck's extraction engine and shows how to build a simple Citadel configuration extractor using Yara-based callbacks, memory reading helpers, and light disassembly, then integrates the workflow into a Karton pipeline for automated config extraction and reporting, with step-by-step setup commands and example outputs.