Dive into a comprehensive 3-day course on dynamic malware analysis led by Veronica Kovah. Explore essential topics including virtualization, Windows internals, malware terminology, and behavioral analysis techniques. Learn to set up isolated malware labs, analyze persistence mechanisms, and understand various malware functionalities such as code injection, keylogging, and backdoors. Gain hands-on experience with tools like Autoruns, Regshot, and CaptureBAT while examining real-world malware samples. Discover automated analysis techniques using sandboxes like Cuckoo, and create actionable outputs with Yara rules and Snort signatures. Master the skills needed to effectively analyze and combat modern malware threats through practical labs and in-depth lectures.
Overview
Syllabus
Dynamic Malware Analysis D1P01 Introduction.
Dynamic Malware Analysis D1P02 Background: VirtualBox.
Dynamic Malware Analysis D1P03 Background: PEs and Packers.
Dynamic Malware Analysis D1P04 Background: File Identification.
Dynamic Malware Analysis D1P05 Background: Windows Libraries.
Dynamic Malware Analysis D1P06 Background: Windows Processes.
Dynamic Malware Analysis D1P07 Background: Windows Registry.
Dynamic Malware Analysis D1P08 Background: Windows Services.
Dynamic Malware Analysis D1P09 Background: Networking Refresher.
Dynamic Malware Analysis D1P10 Isolated Malware Lab Setup.
Dynamic Malware Analysis D1P11 Malware Terminology.
Dynamic Malware Analysis D1P12 Playing with Malware: Poison Ivy RAT.
Dynamic Malware Analysis D1P13 Behavioral Analysis Overview.
Dynamic Malware Analysis D1P14 Persistence Overview.
Dynamic Malware Analysis D1P15 Persistence Lab Using Autoruns.
Dynamic Malware Analysis D1P16 Persistence Lab Image File Execution Options.
Dynamic Malware Analysis D1P17 Persistence Lab File System Persistence.
Dynamic Malware Analysis D1P18 Persistence Lab IMworm with Autoruns.
Dynamic Malware Analysis D2P01 Day 1 Review.
Dynamic Malware Analysis D2P02 Persistence Lab IMworm with Regshot.
Dynamic Malware Analysis D2P03 Persistence Lab Hydraq with Autoruns.
Dynamic Malware Analysis D2P04 Persistence Lab Hydraq with Regshot.
Dynamic Malware Analysis D2P05 Maneuvering Overview.
Dynamic Malware Analysis D2P06 Maneuvering Code Injection Overview.
Dynamic Malware Analysis D2P07 Maneuvering Lab Parite.
Dynamic Malware Analysis D2P08 Background Windows APIs.
Dynamic Malware Analysis D2P09 Maneuvering Lab Onlinegames1 Lab.
Dynamic Malware Analysis D2P10 Maneuvering Lab Onlinegames2 Lab.
Dynamic Malware Analysis D2P11 Maneuvering DLL Search Path Hijacking And APC Overview.
Dynamic Malware Analysis D2P12 Maneuvering Lab Checking Known Dlls.
Dynamic Malware Analysis D2P13 Maneuvering Lab Nitol.
Dynamic Malware Analysis D2P14 Maneuvering IAT EAT Inline Hooking Overview.
Dynamic Malware Analysis D2P15 Malware Functionality Overview.
Dynamic Malware Analysis D2P16 Malware Functionality Keylogging Overview.
Dynamic Malware Analysis D2P17 Malware Functionality Lab SetWindowsHookEx.
Dynamic Malware Analysis D2P18 Malware Functionality Backdoor Overview.
Dynamic Malware Analysis D2P19 Malware Functionality Backdoor Lab Sticky Keys.
Dynamic Malware Analysis D2P20 Malware Functionality Phone Home Lab DarkShell.
Dynamic Malware Analysis D3P01 Day 2 Review.
Dynamic Malware Analysis D3P02 Degrading Security Overview.
Dynamic Malware Analysis D3P03 Degrading Security Lab SpyEye.
Dynamic Malware Analysis D3P04 Degrading Security Lab Conficker Prelude.
Dynamic Malware Analysis D3P05 Analyzing DLLs.
Dynamic Malware Analysis D3P06 Degrading Security Lab Conficker And Service State Diffing.
Dynamic Malware Analysis D3P07 Self Destruction.
Dynamic Malware Analysis D3P08 Self Destruction Detection With CaptureBAT.
Dynamic Malware Analysis D3P09 Hiding Files Lab IMWorm.
Dynamic Malware Analysis D3P10 Self Avoidance.
Dynamic Malware Analysis D3P11 Self Avoidance Lab Poison Ivy.
Dynamic Malware Analysis D3P12 Anti-VM Techniques.
Dynamic Malware Analysis D3P13 Automated Dynamic Analysis Sandboxes.
Dynamic Malware Analysis D3P14 Automated Dynamic Analysis Sandboxes CuckooSandbox Lab PoisonIvy.
Dynamic Malware Analysis D3P15 MAEC.
Dynamic Malware Analysis D3P16 Automated Dynamic Analysis Sandboxes CuckooSandbox Lab Parite.
Dynamic Malware Analysis D3P17 Actionable Output Yara.
Dynamic Malware Analysis D3P18 Actionable Output Yara Lab Bot Classification.
Dynamic Malware Analysis D3P19 Actionable Output Snort.
Dynamic Malware Analysis D3P20 Actionable Output Snort Lab Detecting Beaconing.
Dynamic Malware Analysis D3P21 Class Summary.
Taught by
OpenSecurityTraining2
