🎯 What You'll Learn
- Build a safe analysis lab
- Perform static triage
- Observe behaviour dynamically
- Extract and use indicators
About This Workbook
Understanding malware is essential to defending against it. This workbook covers building a safe lab, static and dynamic analysis, and extracting actionable indicators of compromise.
Chapter 1 — The Analysis Lab
A safe, isolated place to detonate samples.
- Isolation
- Tooling
- Safety practices
Chapter 2 — Static Analysis
Learning about a sample without running it.
- File triage
- Strings and imports
- Packing
Chapter 3 — Dynamic Analysis
Watching malware reveal itself at runtime.
- Behavioural monitoring
- Network activity
- Persistence
Chapter 4 — Indicators
Turning analysis into defence.
- Host and network IOCs
- Detection rules
- Reporting
Keep going. Work through each chapter in order, then apply what you learned in the matching labs.