The course Malware Analysis It immerses you in a constantly evolving field that is of vital importance today. The growing digitalisation and increasing sophistication of cyber threats mean that demand for cybersecurity experts is booming. You will learn to identify, analyse and mitigate the risks associated with malware, gaining essential skills to protect systems and data. This course is designed to help you develop a critical and analytical thinking, which is vital for tackling the challenges of the digital environment. What’s more, you’ll have access to tools and techniques that will enable you to unravelling the secrets of malware y to strengthen the security of organisations. Don’t get left behind in a sector where job opportunities are becoming increasingly widespread and in demand. Join us and become a key professional in cyber defence!
Malware Analysis
Cybersecurity
12 noon
Introduction
Objectives
- Understanding what the malware and the different types found in the today’s cyberspace.
- Analyse infection scenarios and the communication techniques used by the attackers. .
- Assess log data and events to identify suspicious behaviour within the system.
- Apply persistence and concealment techniques which malware uses to evade detection.
- Carry out basic analysis of malicious files such as PDF and JAR and documents from Microsoft Office .
- Investigate the reverse engineering process to break down and understanding complex malware.
- Implement malware detection and containment techniques using tools such as ClamAV.
Table of Contents
TEACHING UNIT 1. INTRODUCTION
What is malware?
Types of Malware
TEACHING UNIT 2. INFECTION SCENARIO AND COMMUNICATION TECHNIQUES
Running an attachment
An unfortunate click
Opening an infected document
Cyberattacks
Physical attacks: infection via USB stick
An Introduction to Communication Techniques with C&C
TEACHING UNIT 3. COLLECTING AND ANALYSING INFORMATION
Analysing data from the register
Analysing data from the event logs
Analysing files executed during boot-up
Analysing the file system
TEACHING UNIT 4. MALWARE FUNCTIONALITIES. HOW TO RESPOND TO THREATS
Persistence techniques
Concealment techniques
File-less malware
Avoiding UAC
Steps to take in response to threats
TEACHING UNIT 5. BASIC FILE ANALYSIS
Analysis of a PDF file
Extract the JavaScript code
Deobfuscate JavaScript code
Analysis of an Adobe Flash file
Analysis of a JAR file
Analysis of a Microsoft Office file
TEACHING UNIT 6. REVERSE ENGINEERING
What is reverse engineering?
Assembler x
Assembler x
Static analysis
Dynamic analysis
TEACHING UNIT 7. OBFUSCATION: INTRODUCTION AND TECHNIQUES
What is obfuscation?
String obfuscation
Obfuscation using the Windows API
Packers
Other types of obfuscation techniques
TEACHING UNIT 8. DETECTION AND CONTAINMENT
First steps in detection and containment
Network Engagement: Indicators
Tips on file signatures
Detection and removal using ClamAV
TEACHING UNIT 9. OPENIOC
Introduction to OpenIOC
Getting started with
Graphical editing interface
Detection