Essentials of Malware Analysis (Forensics)

Overview

Overview

Duration 4 days
Course Time 9.00am - 5.00pm
Enquiry Click here to contact us

This course is delivered by Mandiant Academy.

This course provides a beginner-level introduction to the tools and methodologies used to perform malware analysis on executables found in Windows systems using a practical, hands-on approach. The course introduces learners to disassembly, preparing them for topics covered in more advanced courses, and taught by FLARE malware analysts who are experienced in analysing a diverse set of malware.

Key Takeaways

Key Takeaways

At the end of this course, the participiants will be able to:

  • Quickly perform a malware autopsy using a variety of techniques and tools without running the malware
  • Analyse running malware by observing file system changes, function calls, network communications and other indicators
  • Review the basics and build a foundation of the x86 assembly language
  • Recognise code constructs in the disassembly
  • Use IDA Pro, the main tool for disassembly analysis

Who Should Attend

Who Should Attend

This course is targeted at Information technology professionals, information security professionals, corporate investigators and professionals who need to understand how malware functions operate and the processes involved in malware analysis.

Prerequisites
General knowledge of computer and operating system fundamentals. Exposure to computer programming fundamentals and Windows Internals experience is also recommended.


ICT and SS Competency Framework

ICT and SS Competency Framework

As part of the ICTCF, this course falls under the Cybersecurity functional cluster and tagged to the following competencies:
  • Cybersecurity: Cyber Threat Hunting
  • Cybersecurity: Malware Analysis
  • Cybersecurity: SOC Engineering

The course is mapped to the following job roles:
  • CISOs
  • Cybersecurity Engineers

Course Structure

Course Structure

This course is delivered via virtual instructor-led format and will cover the following topics:

  • Malware Autopsy
  • Running Malware
  • x86 Assembly Language
  • IDA Pro and Disassembly Analysis

     

    NOTE

    Students are required to bring their own laptop that meets the following specs:

  • VMware Workstation 10+ or VMware Fusion 7+
  • 30 GB of free HDD space

Instructors

Instructors


Fees

Fees


Full Fee

Full course fee

S$2137

7% GST on nett course fee

S$149.59

Total nett course fee payable, including GST S$2286.59



Upcoming Classes

Upcoming Classes

Class 1

Duration: 4 days

31 Oct 2022 to 03 Nov 2022 (Full Time)

When :
Oct:
31
Nov:
01, 02, 03

Time : 9:00 AM to 1:30 PM
Registration:

How To Register

How To Register


Agency-sponsored

Step 1 Apply through your organisation's training request system.

Step 2 Your organisation's training request system (or relevant HR staff) confirms your organisation's approval for you to take the course.

Your organisation will send registration information to the academy.

Organisation HR L&D or equivalent staff can click here for details of the registration submission process.


Step 3 The Digital Academy will inform you whether you have been successful in enrolment.