threatfound/ academy

Advanced · 3 modules

Malware Analysis

Safely analyse malicious code, static triage, dynamic sandboxing, and reading what it really does.

▸ the territory

3 / 3 live

A map, not a checklist, see exactly where you are and what comes next.

Building a safe analy…9m
✓Static triage: readin…10m
✓Dynamic analysis: det…10m

Lessons

read · then do

01Building a safe analysis labIsolated VMs, snapshots and the rules that keep malware from escaping. 9 min read

02Static triage: reading a binary without running itStatic triage extracts a suspect binary's identity, strings, and capability from its bytes alone, no execution, so you know what you're dealing with before you ever detonate it. 10 min read

03Dynamic analysis: detonating safelyRun a malware sample inside a sealed, instrumented lab to watch what it actually does — dropped files, persistence, injection, and network callbacks — extract the IOCs, then revert the snapshot every single time. 10 min read

Start the first lesson