Module 1: What is malware

• • Malware History
• • Malware Goals
• • Types of Malware
• • Advanced Persistent Threats
• • Indicators of Compromise

Module 2: Introduction to Malware Analysis

• • Types of malware analysis
• • Goals of malware analysis
• • Impact analysis
• • Containment and mitigation
• • Incident prevention and response playbooks
• • Setting up sandbox environment
• • Cloud-based malware analysis

Module 3: Static malware analysis

• • Executable analysis
• • Extracting secrets
• • Determining if file is packed or obfuscated
• • Fingerprinting the malware
• • Pattern matching using YARA

Module 4: Behavioral malware analysis

• • Malware detonation
• • Sysinternals suite
• • Network communication analysis
• • Monitoring system events
• • Memory dump analysis
• • Simulating real environment

Module 5: Malicious non-exe files

• • Alternative binaries
• • PowerShell scripts
• • Office documents
• • JScript
• • HTML documents
• • Living off the land binaries

Module 6: Advanced techniques used by malware

• • Malware persistence methods
• • Malware stealth techniques
• • Covert channel communication
• • Domain Generator Algorithms
• • Anti-VM and Anti-debugging tricks

Module 7: Defending against malware

• • Windows security solutions
• • Anti-Virus software
• • EDR software
• • Principle of least privilege
• • Application Whitelisting
• • Virtualization
• • Network and domain segmentation