Directory

Reverse-Engineering Malware: Additional Tools and Techniques

Vendor

SANS

Website

Visit the Product Site

Pricing Model

Commercial

Modified

2009-09-23

Owner

Potentate

Add'l Info

Location - Worldwide Duration - 2 days

Submit review Recommend Report

Rating

0 vote

Favoured:

Deepen your understanding of malware analysis tools and approaches with this two-day course, building upon the concepts covered in SEC601: Reverse Engineering Malware: The Essentials of Malware Analysis. You will begin this course by reviewing key assembly language concepts. You will focus on static code analysis, learning to examine malicious code to understand its flow by identifying key logic structures and patterns, looking at examples of bots, rootkits, key loggers, and so on. You will understand how to work with PE headers and handle DLL interactions. Next, you will develop skills for analyzing self-defending malware through unpacking techniques and bypassing code-protection mechanisms. Finally, you will discover how to bypass obfuscation techniques employed by browser-based malicious scripts. This course explores tools and techniques for examining inner-workings of malicious software that build upon fundamental malware analysis concepts. You should already understand the fundamentals of reverse-engineering malware, and must be able to perform key behavioral and code analysis tasks covered in the companion course SEC601. Hands-on workshop exercises are an essential aspect of this course, and allow you to apply reverse-engineering techniques by examining malicious code in a carefully-controlled environment. When performing the analysis, you will study the supplied specimen's behavioral patterns, and examine key portions of its assembly code.

Reviews (0)

Be the first to review this listing!

Search Products

Product Directory

Who's Online?

Directory

Reverse-Engineering Malware: Additional Tools and Techniques