In this 3-day workshop, students learn to detect, contain, and reverse-engineer malware threats through an in-depth exploration of malware tactics and indicators of compromise (IOCs).
Overview
This hands-on course focuses on the tools and techniques used to analyze and reverse engineer malicious software with an emphasis on quickly discovering indicators of compromise (IoCs) and a discussion of reverse code engineering (RCE) techniques for both dynamic and static analysis.
Through hands-on exercises involving real-world malware examples, students learn to identify common malware characteristics used by bots, keyloggers, rootkits, worms, etc. and practice using the tools and techniques used in code-level analysis. Students also learn best practices for standing up and configuring an environment for safe malware analysis and get an introduction to x86 assembly language, disassemblers, and debuggers.
Prerequisites
Students should have general knowledge of computer, networking, and operating system fundamentals. Exposure to malware, assembly language, disassemblers, debuggers, and programming is also recommended.
DURATION & Format
3 days (21 hours)
This course is conducted live, in person by Alpine Security. It can be delivered at your location or at their training facility in the St. Louis, Missouri, metro area.
Outline
- Malware code analysis overview
- Reverse code engineering (RCE)
- Manual (static) code reversing
- Dynamic code reversing
Software and Tools Used
- HashCalc
- Wireshark
- ncat
- Regshot
- PEview
- PEiD
- Multiple Windows Sysinternals tools<
- OllyDbg
- Notepad++
- Hex Editors
- WinDbg
- IDA
Professional Training for Modern Technology Teams
Open Enrollment Courses
Open enrollment courses are a great, cost-effective option for organizations that have an immediate need to train a small number of employees.
Customized Training Programs
Customized training programs can be delivered on-site, in our training lab, or online to help organizations enhance the skills of their internal development teams.
