Dynamic Malware Analysis
HTML-код
- Опубликовано: 21 авг 2024
- You already built the malware analysis lab. We explained how to do dynamic malware analysis at this environment.
Course link: app.letsdefend...
This lesson prepared by Zaid Shah. His social media accounts:
RUclips: / channel
LinkedIn: / zaid-shah-05527a22b
LetsDefend is a hands-on Blue Team training platform that enables people to gain practical experience by investigating real cyber attacks inside a simulated SOC
letsdefend.io
/ letsdefend
/ letsdefendio
/ letsdefend
/ letsdefend
You have no idea, how much you have helped me!!! Thankyouuuu
Great walk-through. Lots of helpful tips. The reason Regshot did not catch file activity was because the checkbox option was not selected before your first shot. And for the HTTP traffic missing, that might be because Wireshark could not decrypt HTTPS traffic. I believe you would have seen something if you tried using fiddler as well. Thanks!
you mean scan dir1 checkbox ? but in website they didn't check it either.
awesome content thank you
Working on that chapter at Letsdefend SOC analysis path
Brilliant 😇
Very Informative Video Sir, I just wanted to know how you decide to run the malware for a particular amount of time. How you stopped malware to execute itself.
thanks for the video
Zaid is so fucking fun bro i cant
Thank you so much this made things so much more clear to me if you have your own channel id love to follow thank you again
How can we download malware samples as shown in the clip ?
virus total
How do you download the tools used for the malware analysis section ?
is there anyway to automate this whole analysis ?
If you find a way, let me know too?
@@Pl4s_m4 check for Morrigu by Phil Leg, basically he compares the behaviour of evasive malwares before and after modifying the VM using a tool he created, maybe this will help you
The module is to create your own malware analysis virtual machine. NO malware files to download, not copy of your notes to download. Anything available. The course itself is just a mess. Very disappointed about this module. Your explanation is very good, but without the resources seen in these videos... not a good thing.
On 11:05 you can see the name of the file that you are looking for inside %TEMP% tmp565A.tmp
c:\users\letsdefend\appdata
oaming\vbxfiqycyfdggl.exe -->This is the answer
no bro still not correct
How can we download malware samples as shown in the clip ?