Advanced Reverse Engineering Malware Training
Advanced Reverse Engineering Malware
Already have experience reverse engineering? Need to take your reversing skills to the next level? InfoSec Institute's Advanced Reverse Engineering Reverse Malware course is the most in-depth, hands-on advanced-level malware reversing course in the industry!
In Advanced Reverse Engineering Malware, you will learn all of the latest
techniques for reversing malware:
- Learn to reverse malware that utilizes multiple overlapping obfuscation techniques in both user and kernel space.
- Gain hands-on training for reversing binary and/or obfuscated Command and Control (C&C) communication protocols.
- Train on the various specialized tools and IDA plugins that make reversing complex malware possible.
Because modern malware makes use of sophisticated obfuscation techniques, you need to have specific reversing skills in the deconstruction of various x86 assembler obfuscation tricks used by malware in order to be an expert malware reverser. This four day course bridges the gap between reversing "vanilla" compiler generated code and the nontrivial, complex code created by expert malware authors.
Modern malware typically is developed with some measure of Command and Control (C&C) communication capabilities. The C&C protocol can used to maintain a botnet, deliver package updates, send commands, and steal data from compromised machines. Understanding and reversing the underlying C&C protocol is essential to understanding the intention, functionality, and potentially the identity of the malware author. In the Advanced Reverse Engineering Malware course, you will learn how to reverse these C&C protocols from live malware examples that are currently in circulation.
Reversing obfuscated malware in some cases must be done programmatically. This requires you to understand how to use specialized plugins for IDA as well as other malware-specific tools in order to de-obsfucate various portions of the code under analysis. In other cases, hours or days of manual work can be saved by learning the proper use of a specific reversing tool. InfoSec Institute will teach you how to use these important tools in a series of hands-on labs during this course.
Learn from Experts in the field of Reverse Engineering:
All of the instructors for InfoSec Institute's Advanced Reverse Engineering Malware course active work in the field of reverse engineering or security research. Our instructors have spoken at high-profile conferences (such as the Black Hat Briefings, the RSA Security Conference, and the Pentagon Security Forum) and industry events.
Learn reverse engineering in our hands-on classroom labs:
Some of the reverse engineering concepts you will learn to master during this course...
- IDA configuration for programmatic reversing and script writing
- IDA Plugin architecture and setup
- The Windows Kernel
- Understanding the Kernel API used by malware authors
- Overview of common rootkit technologies
- Using WinDBG for kernel debugging
- PE Anti-reversing techniques: De-obfuscating executables for IDA
- Obfuscation: User-mode obfuscation methods
- Anti-RE Techniques: Detecting debuggers, virtual machines, and other tricks
- Kernel assisted obfuscation
- Understanding rootkit process / DLL injection
|
- Understanding rootkit process / DLL injection
- Reversing kernel-mode botnet bots
- Study of Metasploit's Shikata-ga-nai
- Automated unpacking systems
- Utilizing Saffron and Ether
- Analyzing physical memory with memoryze
- Identifying common algorithms inside worms
- Virtual Machine based packers
- Reversing Themida and other VM packers
- Reversing mangled UPX and other compression types
- Protocol Reversing (Reversing Storm's usermode code)
- Reverse storm's C&C protocol
- Reversing .NET byte code
- CEREA Review
|
Certified Expert Reverse Engineering Analyst:
In any hands on reverse engineer training course, it is important to have the opportunity to prove to current or potential employers that you have the skills you say you do. This course prepares you for the most prestigious reverse engineering certification in the industry, the CEREA. The exam is given on-site at the course location.
How You Benefit:
- Gain the in-demand career skills of a reverse engineer. Very few information security professionals, incident response analysts and vulnerability researchers have the ability to reverse malware efficiently. You will undoubtedly be at the top of your professional field.
- Learn the methodologies, tools, and manual malware reversing techniques used real world situations in our reversing lab.
- Move beyond automated "sandbox"
testing of malware.
- More than interesting theories and lecture, get your hands dirty in our dedicated reversing lab in this security training course.
What's Included:
- 4 Days of Expert Reverse Engineering Malware Instruction from a senior instructor with real-world experience and deep knowledge of course content.
- Guaranteed small class size (less than 10-16 Students), you get an intimate learning setting not offered at any of our competitors.
- InfoSec Institute's Custom Reversing Tools Enterprise Suite, includes every program covered in the course for at home study. (119 Tools).
- All meals, snacks and refreshments included.
- Certified Expert Reverse Engineering Analyst (CEREA) exam fees.
- Lecture, Lab Exercise and Text book
Required Prerequisites:
- Firm understanding of the Windows Operating System
- Firm understanding of computer architecture concepts
- Grasp of the TCP/IP protocols
- Experience with Reverse Engineering or current CREA certification holder
If you are unsure if you meet the required prerequisites, contact us for a quick reverse engineering training skill check.
Current Course List:
Current Pricing (Call 866-471-0059 for up-to-date network security training deals):
Tuition -
(Includes: 5 days of expert ethical network security training, 3 daily meals, text book, course book, lab manual, snacks, certified ethical hacker certification voucher)
|
