Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
The sample only has to escape once, and the machine it escapes onto should never be yours.
Analyzing Malware Safely
The sample only has to escape once, and the machine it escapes onto should never be yours.
Static Analysis Basics
You can learn a lot about a binary without ever running it, and you should look before you leap.
Dynamic Analysis Basics
Static reading only takes you so far; sometimes you have to let it run and watch what it touches.
Strings and Unpacking
When strings comes back empty and entropy reads 8.0, the real binary is hiding under a packer.
Writing the Analysis Report
The analysis is worthless until a defender can act on it, and that means indicators they can search for tonight.