首页

投稿

高级恶意软件分析系列课

4663

0

2026-06-15 20:50:24

来源：https://tsec.net/courses/malware-analyst/ 课程介绍：在本恶意软件分析和逆向工程课程中，您将深入剖析不同恶意软件类型和变体的核心，了解它们背后的对抗心态以及所使用的TTP。最终您将获得战胜任何恶意软件的能力和知识。 = 打开B站官方字幕即可翻译成中文。

恶意软件分析

逆风微笑的代码狗发消息

莫道桑榆晚,为霞尚满天

1 - Introduction to Malware Analysis

10:57

2 - Lab Setup - Intro

02:59

3 - Lab Setup - Deploying Flare-VM

04:47

4 - Lab Setup - Connecting to INetSim

12:30

1 - Installing Visual Studio

03:34

2 - The four stages of Development

04:55

3 - Basic C Code Example - Part 1

06:04

4 - Basic C Code Example - Part 2

10:29

5 - Basic Reverse Engineering - Part 1

24:26

6 - Basic Reverse Engineering - Part 2

04:53

1 - PE Structure Overview - Part 1

12:40

2 - PE Structure Overview - Part 2

13:14

3 - PE-exe vs. PE-dll

07:57

1 - Purpose and Goals of Malware Analysis

04:32

2 - Understanding Signature Names and VirusTotal Overview

11:30

3 - IoC vs. IoA

07:10

4 - Identifying File Types

04:20

5 - Calculating Hashes

10:24

6 - Strings Extraction

05:14

8 - Packing Analysis - Part 2

14:48

9 - Packing Analysis - Part 3

03:05

10 - Identifying Malicious Functionality

09:01

11 - Approaching and Reading Documentations

09:38

13 - Dissecting FlawedAmmyy - Part 2

25:19

14 - Saving your RE progress to an IDB File

01:58

1 - Introduction to Dynamic Analysis

28:45

2 - Working with Process Explorer

09:10

3 - Extracting IoCs using Process Hacker

05:41

4 - Working with Procmon

10:57

5 - Monitoring WinAPI Functions using API Logger

02:11

6 - Inspecting Process Command Line Parameters using CMD Watcher

06:09

7 - Debugging DLL Files with IDA Disassembler

04:55

8 - FlawedAmmyy RAT - Attack Flow PCAP Analysis Overview

15:27

9 - FlawedAmmyy RAT Dynamic Analysis

22:29

10 - FlawedAmmyy RAT Dynamic Reverse Engineering - Part 1

27:15

11 - FlawedAmmyy RAT Dynamic Reverse Engineering - Part 2

26:29

12 - Detecting FlawedAmmyy RAT with YARA

24:37

1 - Introduction to Malicious Documents

07:07

2 - Introduction to Analyzing Malicious PDF Files

02:36

3 - Analyzing the CVE-2008-2992 PDF Exploit

05:11

4 - Analyzing VBA Macros - Introduction

05:01

5 - Analyzing VBA Macros - Shellcode Injection

14:22

1 - Course Introduction

01:37

2 - Intro to Reverse Engineering - Part 1

15:15

3 - Intro to Reverse Engineering - Part 2

12:45

4 - Bitwise Operations

05:29

1 - Introduction to Windows API Functions

10:36

2 - Configuring Debug Symbols

02:08

3 - Reading MSDN Documentation

08:06

4 - Understanding Windows API Functions - Part 1

22:47

5 - Understanding Windows API Functions - Part 2

05:57

1 - Introduction to Code Injection

04:43

2 - Process Injection Classification

01:16

3 - Process Injection using CreateRemoteThread

05:04

4 - Process Hollowing - Part 1

10:24

5 - Process Hollowing - Part 2

10:34

1 - Introduction to Anti-Analysis

08:17

2 - Anti-Debugging - Part 1

09:01

3 - Anti-Debugging - Part 2

03:04

4 - Anti-VM - Part 1

07:11

5 - Anti-VM - Part 2

09:56

6 - Anti-VM - Part 3

08:51

7 - Anti-AV

05:21

1 - Introduction to Packers and the Unpacking Process

09:08

2 - Unpacking the WannaCry Ransomware

06:28

3 - Manual Unpacking of UPX Packed Malware

09:29

4 - Manual Unpacking of PECompact Packed Malware

10:48

5 - Manual Unpacking of ASPack Packed Malware

05:02

1 - Introduction to Shellcode Analysis

06:14

2 - Shellcode Reverse Engineering - Part 1

08:41

3 - Shellcode Reverse Engineering - Part 2

15:51

4 - Shellcode Reverse Engineering - Part 3

26:23

1 - DarkSide Ransomware Initial Analysis

19:03

2 - DarkSide Ransomware Runtime Code Unpacking - Part 1

27:02

3 - DarkSide Ransomware Runtime Code Unpacking - Part 2

26:54

4 - DarkSide Ransomware Runtime Code Unpacking - Part 3

17:09

5 - DarkSide Ransomware Dynamic API Resolve

23:21

6 - DarkSide Ransomware Rebuilding the IAT (Import Address Table)

07:32

7 - DarkSide Ransomware TTPs Dissection - Part 1

22:11

8 - DarkSide Ransomware TTPs Dissection - Part 2

39:23

1 - SolarWinds Sunburst Backdoor Initial Analysis

07:50

2 - SolarWinds Sunburst Backdoor Backtracking (Function Call Tree Analysis)

10:49

3 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 1

21:24

4 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 2

21:20

5 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 3

08:25

6 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 4

15:22

7 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 5

25:48

顶部