Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Indicators of Compromise - From Malware Analysis to Eradication

44CON Information Security Conference via YouTube

Overview

Learn to identify and eradicate malware in corporate networks using freely available tools in this 50-minute workshop. Explore techniques from locating unknown malware to analyzing samples and identifying indicators of compromise. Dive into advanced topics like Windows internals, debug object handling, thread hiding, process exploitation, anti-dumping techniques, and virtual machine detection. Gain practical skills in malware analysis, reverse engineering, and enterprise-wide threat mitigation through hands-on exercises and expert guidance.

Syllabus

Intro
About me
Malware Research Lab, 2012
How INT3 breakpoints work
Memory Breakpoints
Hardware breakpoints
Timing
Windows Internals
Debug Object Handle
Thread Hiding
Open Process
Parent Process
UnhandledExceptionFilter
Process Exploitation
Nanomites
Stolen Bytes (Stolen Code)
Virtual Machines (think JVM, not Box)
Guard Pages
Removing the PE Header
Anti-dumping
Exploiting IA-32 Instructions
Interrupt 2D
Stack Segment
Instruction Prefixes
Exploiting LA-32 Instructions
VM Detection
Debugger specific techniques
Other Techniques
Announcement

Taught by

44CON Information Security Conference

Reviews

Start your review of Indicators of Compromise - From Malware Analysis to Eradication

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.