Malware Analysis and Digital Forensics

Catalog description

In this course, students will learn how to forensically analyze complex Win - dows malware executables, use steganography to overcome code obfus- cation techniques that make it difficult to analyze static code, analyze multi-stage malware in memory, find and extract de-obfuscated shell - code while a program is running, use WinDBG to debug and evaluate important process data structures in memory, identify encryption algo- rithms in ransomware, and look into data obfuscation in malware. With the aid of scripting languages, students will learn how to become pro - ficient with malware, comprehend the fundamentals of examining and evaluating characteristics of malware that is captured during operation, learn how to spot a number of questionable behaviors, acquire expertise