Intro to Malware Analysis

Every once in a while, when working as a SOC analyst, you will encounter content (a file or traffic) that appears suspicious, and you will need to determine whether it is malicious. It is normal to feel confused with all the mixed signals such content provides. This becomes a little overwhelming for somebody just starting in cyber security, and it is common to begin questioning oneself. Knowing what steps to take to resolve such a scenario is helpful. This room will outline some steps to help you make an initial conclusion about a particular suspicious file.

Learning Objectives

• Understand what malware is.
• Use common tools and resources to assist your investigations.
• Perform basic static and dynamic analysis.
• Set up a safe environment for analysis.

Prerequisites

• Windows Internals
• History of Malware

So let's get started!