Performing Malware Analysis on Malicious Documents

سرفصل های دوره

Malicious documents have become a form of malware that all incident responders need to be able to analyze. This course will teach you how to analyze malicious Adobe PDF and Microsoft Office documents, along with any malicious scripts they contain.

01. Course Overview

01. Course Overview

02. Introduction and Setting up Your Lab

01. Introduction

02. Malicious Document Analysis

03. Virtual Machine Setup

04. Summary

03. Performing Document Analysis

01. Introduction

02. Malicious Document Analysis Scenario

03. Malware and Static Analysis Review

04. Pattern Analysis and Yara

05. Metadata

06. Static Analysis Demo

07. Conclusion

04. Analyzing PDF Documents

01. Introduction

02. PDF Objects

03. PDF Keywords

04. String and Data Encoding and Filters

05. PDF Analysis and Tools

06. Demo

07. Conclusion

05. Performing JavaScript Analysis

01. Introduction

02. Script Analysis Indicators

03. Example Malicious JavaScript

04. Script Obfuscation

05. JavaScript Analysis Tools

06. Demo

07. Conclusion

06. PDF Lab

01. Introduction

02. PDF Analysis Lab

03. Summary

07. Analyzing Office Documents

01. Introduction

02. Office Document Attacks and Analysis

03. Microsoft Office Structured Storage Format Analysis

04. Microsoft Office Open XML Format Analysis

05. Demo

06. Summary

08. Performing VBA Script Analysis

01. Introduction

02. Accessing Macros in Microsoft Word

03. VBA Analysis and Tools

04. Demo

05. Summary

09. Quickly Analyzing Malicious Documents

01. Introduction

02. Using Debuggers During Analysis

03. Lazy Office Analyzer

04. Demo

05. Summary

10. Office Document Lab

01. Introduction

02. Office Document Analysis Lab- Extracting Data

03. Office Document Analysis Lab- Executing the Document

04. Summary

11. Analyzing Malicious Documents Recap

01. Document Analysis Summary

02. Malicious Scripts

03. Analysis Tools and Tips

04. Looking Forward

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight