05 · Cyber Defence

Malware & Ransomware Analysis

Static and dynamic analysis, sandboxing, YARA rules and Ransomware-as-a-Service tradecraft.

• Cuckoo Sandbox
• YARA & IOCs
• Memory forensics

Programme outline

1. Malware taxonomy and attack technologies
2. Static analysis workflow
3. Dynamic analysis and sandboxing with Cuckoo
4. YARA rules and IOC extraction
5. Ransomware and Ransomware-as-a-Service economics
6. Memory forensics with Volatility
7. Machine-learning approaches to malware detection