SANS Tip of the Day: Careers in Cybersecurity
Have you considered a career in cybersecurity? It is a fast-paced, highly dynamic field with a huge number of specialties…
Malware Analysis Tutorial 26: Rootkit Configuration
Learning Goals: Practice the use of user mode WinDbg for inspecting process in non-invasive mode Practice the use of IMM…
Malware Analysis Tutorial 25: Deferred Procedure Call (DPC) and TCP Connection
Learning Goals: Use WinDbg for kernel debugging Apply hardware data breakpoint for analyzing data flow Understand TDI Network Service Understand…
Malware Analysis Tutorial 24: Tracing Malicious TDI Network Behaviors of Max++
Learning Goals: Use WinDbg for kernel debugging Apply the data tracing and hardware data breakpoint points for analyzing data flow…
Malware Tutorial Analysis 23: Tracing Kernel Data Using Data Breakpoints
Learning Goals: Use WinDbg for kernel debugging Apply the data tracing and hardware data breakpoint points for analyzing data flow…
Malware Analysis Tutorial 22: IRP Handler and Infected Disk Driver
Learning Goals: Use WinDbg for kernel debugging Understand basic inner working of disk driver Understand virtual hidden drive creation Reverse…
Malware Analysis Tutorial 21: Hijack Disk Driver
Learning Goals: Use WinDbg for kernel debugging Understand basic inner working of disk driver Understand virtual hidden drive creation Reverse…
Malware Analysis Tutorial 20: Kernel Debugging – Intercepting Driver Loading
Learning Goals: Use WinDbg for kernel debugging Patch Debugger to Defend Malicious Actions by Malware Understand Driver Entry Interception of…
Malware Analysis Tutorial 19: Anatomy of Infected Driver
Learning Goals: Perform binary comparison of files Practice debugging techniques Understand executable file header format Applicable to: Operating Systems Assembly…
Malware Analysis Tutorial 18: Infecting Driver Files (Part II: Simple Infection)
Learning Goals: Understand the frequently used tricks by malware to infect driver files Understand the role of registry in Windows…