Understanding and Analysing Malware

Introduction to Malware

• History
• Definitions
• Sources
• Exercise: Building a Sandbox

The Malware Family

• Viruses
• Worms
• Trojans
• Bot Nets
• Rootkits
• Web Exploit Kits
• Ransomware
• Exercise: Rootkit infection
• Exercise: Ransomware Infection

Threats and Exploits

• Threat Intelligence
• Threat & Exploit Sources
• Exploits against the system
• Exercise: Exploiting the operating system

Distribution and Infection

• Distribution Methods and Tools
• Infection Vectors

Testing Scoring and Submission

• Standards, Schemes & Scoring

Operating Systems and Files

• Memory & File Management

System Hardening and Baselining

• Operating Systems & Applications
• Memory and System

Static Analysis

• Basic vs Advanced Analysis
• Tools & Techniques
• Exercise: Malware analysis - Static

Malware Evasion

• How Malware avoids Detection

Malware Discovery Techniques

• How to detect Malware

Dynamic Analysis

• Using Dynamic Analysis Tools
• Sandboxing Malware
• Dynamic Analysis and Reporting
• Exercise: Dynamic Malware Analysis
• Exercise: Memory Analysis