Call toll free 1(866)471-0059
    Call direct +1-708-689-0131
What‘s New   About InfoSec   Course Catalog   Contact Us
 
The InfoSec Institute Advantage:
The Planet's Most Comprehensive Training Experience
Small Class Size
Hands On Security Training
Cutting-Edge Course Content
Satisfaction Guarantee
World Renown Instructors
Boot Camp Style Training
Luxury Accommodations
 
Enterprise Security Awareness:
Security Awareness for IT Users
Security Awareness for PCI DSS
Security Awareness for IT Pros
Security Awareness for Software Developers
Hands-On Security Training:
Ethical Hacking
Advanced Ethical Hacking
Penetration Testing - 10 Day
Expert Penetration Testing
Intrusion Prevention
Computer Forensics Training
Advanced Computer Forensics
Data Recovery Training
Forensics & Data Recovery - 10 Day
Security Architecture Design
Application Security
SCADA Security
Reverse Engineering Training
Advanced Reverse Engineering Malware
Fundamentals of Information Security
Incident Response and Network Forensics
VOIP Security Course
Wireless Security Training
PCI Compliance Training
On-Site Training
Certification Preparation Training:
CEH Boot Camp
CISSP Boot Camp
CISA Boot Camp
CISM Boot Camp
ECSA/LPT Boot Camp
Security+ Boot Camp
On-Site Training
8570.1 Compliance Training:
Learn More About 8570 Compliance
IAT1: A+ Boot Camp
IAT1: Network+ Boot Camp
IAT2: Security+ Boot Camp
IAT3: CISSP Boot Camp
IAT3: CISA Boot Camp
IAM1: CAP Boot Camp
IAM1: Security+ Boot Camp
IAM2: CISM Boot Camp
IAM2: CAP Boot Camp
IAM2: CISSP Boot Camp
IAM3: CISM Boot Camp
IAM3: CISSP Boot Camp
On-Site Training
IT Audit & Project Management Training:
CISA Boot Camp
CISM Boot Camp
CGEIT Boot Camp
CRISC Boot Camp
PMP Boot Camp
CAPM Training
On-Site Training
Information Assurance Training:
CAP Boot Camp
DIACAP Training
5 Day C&A Boot Camp
5 Day DIACAP Validator Training
On-Site Training
Secure Software Development:
Secure Coding for .NET - C#/ASP.NET
Secure Coding for Java & JEE
Application Security Training
On-Site Training
Technical IT Training:
A+ Boot Camp
Network+ Boot Camp
8 Day A+/Network+ Boot Camp
Data Recovery Training
On-Site Training
Online Professional Development:
Hacker Training Online
Advanced Hacking Online
Penetration Testing Online
Intrusion Prevention Online
Reverse Engineering Online
Computer Forensics Training
SCADA Security Online
Data Recovery Online
Security Architecture Online
Application Security Online
CISSP Boot Camp Online
CISM Boot Camp Online
CISA Boot Camp Online
Small Class Size
Bring a Friend Discount
Hands-On Instruction
World Renown Instructors
 
 
 
Advanced Reverse Engineering Malware Training

Advanced Reverse Engineering Malware

Already have experience reverse engineering? Need to take your reversing skills to the next level? InfoSec Institute's Advanced Reverse Engineering Reverse Malware course is the most in-depth, hands-on advanced-level malware reversing course in the industry!

In Advanced Reverse Engineering Malware, you will learn all of the latest techniques for reversing malware:

  • Learn to reverse malware that utilizes multiple overlapping obfuscation techniques in both user and kernel space.
  • Gain hands-on training for reversing binary and/or obfuscated Command and Control (C&C) communication protocols.
  • Train on the various specialized tools and IDA plugins that make reversing complex malware possible.


Because modern malware makes use of sophisticated obfuscation techniques, you need to have specific reversing skills in the deconstruction of various x86 assembler obfuscation tricks used by malware in order to be an expert malware reverser. This four day course bridges the gap between reversing "vanilla" compiler generated code and the nontrivial, complex code created by expert malware authors.

Modern malware typically is developed with some measure of Command and Control (C&C) communication capabilities. The C&C protocol can used to maintain a botnet, deliver package updates, send commands, and steal data from compromised machines. Understanding and reversing the underlying C&C protocol is essential to understanding the intention, functionality, and potentially the identity of the malware author. In the Advanced Reverse Engineering Malware course, you will learn how to reverse these C&C protocols from live malware examples that are currently in circulation.

Reversing obfuscated malware in some cases must be done programmatically. This requires you to understand how to use specialized plugins for IDA as well as other malware-specific tools in order to de-obsfucate various portions of the code under analysis. In other cases, hours or days of manual work can be saved by learning the proper use of a specific reversing tool. InfoSec Institute will teach you how to use these important tools in a series of hands-on labs during this course.

Learn from Experts in the field of Reverse Engineering:
All of the instructors for InfoSec Institute's Advanced Reverse Engineering Malware course active work in the field of reverse engineering or security research. Our instructors have spoken at high-profile conferences (such as the Black Hat Briefings, the RSA Security Conference, and the Pentagon Security Forum) and industry events.

Learn reverse engineering in our hands-on classroom labs:
Some of the reverse engineering concepts you will learn to master during this course...

  • IDA configuration for programmatic reversing and script writing
  • IDA Plugin architecture and setup
  • The Windows Kernel
  • Understanding the Kernel API used by malware authors
  • Overview of common rootkit technologies
  • Using WinDBG for kernel debugging
  • PE Anti-reversing techniques: De-obfuscating executables for IDA
  • Obfuscation: User-mode obfuscation methods
  • Anti-RE Techniques: Detecting debuggers, virtual machines, and other tricks
  • Kernel assisted obfuscation
  • Understanding rootkit process / DLL injection
  • Understanding rootkit process / DLL injection
  • Reversing kernel-mode botnet bots
  • Study of Metasploit's Shikata-ga-nai
  • Automated unpacking systems
  • Utilizing Saffron and Ether
  • Analyzing physical memory with memoryze
  • Identifying common algorithms inside worms
  • Virtual Machine based packers
  • Reversing Themida and other VM packers
  • Reversing mangled UPX and other compression types
  • Protocol Reversing (Reversing Storm's usermode code)
  • Reverse storm's C&C protocol
  • Reversing .NET byte code
  • CEREA Review


Certified Expert Reverse Engineering Analyst:

In any hands on reverse engineer training course, it is important to have the opportunity to prove to current or potential employers that you have the skills you say you do. This course prepares you for the most prestigious reverse engineering certification in the industry, the CEREA. The exam is given on-site at the course location.

 

How You Benefit:

  • Gain the in-demand career skills of a reverse engineer. Very few information security professionals, incident response analysts and vulnerability researchers have the ability to reverse malware efficiently. You will undoubtedly be at the top of your professional field.
  • Learn the methodologies, tools, and manual malware reversing techniques used real world situations in our reversing lab.
  • Move beyond automated "sandbox" testing of malware.
  • More than interesting theories and lecture, get your hands dirty in our dedicated reversing lab in this security training course.

What's Included:

  • 4 Days of Expert Reverse Engineering Malware Instruction from a senior instructor with real-world experience and deep knowledge of course content.
  • Guaranteed small class size (less than 10-16 Students), you get an intimate learning setting not offered at any of our competitors.
  • InfoSec Institute's Custom Reversing Tools Enterprise Suite, includes every program covered in the course for at home study. (119 Tools).
  • All meals, snacks and refreshments included.
  • Certified Expert Reverse Engineering Analyst (CEREA) exam fees.
  • Lecture, Lab Exercise and Text book

Required Prerequisites:

  • Firm understanding of the Windows Operating System
  • Firm understanding of computer architecture concepts
  • Grasp of the TCP/IP protocols
  • Experience with Reverse Engineering or current CREA certification holder

If you are unsure if you meet the required prerequisites, contact us for a quick reverse engineering training skill check.

Current Course List:

Current Pricing (Call 866-471-0059 for up-to-date network security training deals):


Tuition -
(Includes: 5 days of expert ethical network security training, 3 daily meals, text book, course book, lab manual, snacks, certified ethical hacker certification voucher)