Malware Analysis & Reverse Engineering

About this course

This advanced course teaches the defensive discipline of malware analysis: understanding what a sample does so you can detect, contain and remediate it. You start by building an isolated, offline analysis VM and safe handling rules. You then practise static analysis — hashing, strings, headers and imports — on a harmless program you compile yourself, and learn dynamic analysis by observing process, file and network behavior in a sandbox. Further lessons cover disassembly and decompilation, spotting and reversing packing and obfuscation, Windows persistence techniques, automating triage with Python, and writing YARA-style detection rules. The course ends with collecting indicators of compromise and writing a clear, actionable report. Every exercise uses inert artifacts you create inside your own isolated lab, for authorized, legal testing only.