Slime - Automated Anti-Sandboxing Disarmament System

This course focuses on teaching an automated disarmament system for malware armed with anti-sandboxing techniques. The learning outcomes include understanding host-fingerprinting malware, armed malware with general anti-sandboxing, and the disarmament approach focusing on exit reasons and activity in malware execution. The course covers key technologies such as malware palpation, code execution integrity, and execution branch detection. The teaching method involves a presentation with statistics on evasive malware in the real world and analysis of large-scale samples. The intended audience for this course includes security engineers, malware analysts, and individuals interested in cybersecurity.