K_Cyber Security Malicious Software Defender (CSMD)

1 – 01 Building Executables.
1 – 02 Executable Formats.
1 – 03 Windows Loader.
1 – 04 Lab. Executable Format.
1 – 05 Lab. Altering the Entry Point.
1 – 06 Lab. DLL Export Table.
1 – 07 Lab. TLS Callback.
2 – 01 Intro and PE Editors.
2 – 02 Lab. PE Editors.
2 – 03 Runtime Monitoring.
2 – 04 Lab. Runtime Monitoring.
2 – 05 Network Traffic.
2 – 06 Lab. Network Traffic.
2 – 07 Debuggers and Disassemblers.
2 – 08 Lab. Debuggers & Disassemblers.
2 – 09 Lab. LordPE Process Dumping.
2 – 10 Lab. CFF Explorer.
2 – 11 Lab. Hiew Editor.
2 – 12 Lab. Process Explorer.
2 – 13 Lab. Process Monitor.
2 – 14 Lab. API Monitor.
2 – 15 Lab. Cuckoo Sandbox.
2 – 16 Lab. WireShark.
2 – 17 Lab. FakeNet.
2 – 18 Lab. TCPView.
2 – 19 Lab. Immunity Debugger.
2 – 20 Lab. IDA Pro.
3 – Dynamic_Analysis_ Analyzing_Malware.
3 – Dynamic_Analysis_Analysis_with_Sysinternals_Suite.
3 – Dynamic_Analysis_Dumping_Malware_from_Memory.
3 – Dynamic_Analysis_Faking_the_Network.
3 – Dynamic_Analysis_Glossary_and_Definitions.
3 – Dynamic_Analysis_Persistence_check_with_Autoruns.
3 – Dynamic_Analysis_Running_DLLs.
3 – Dynamic_Analysis_Sandbox_Analysis.
3 – Dynamic_Analysis_Setting_up_the_Lab.
3 – Dynamic_Analysis_Spreading_Techniques.
3 – Dynamic_Analysis_Types_of_Malware.
4 – 01 Reverse_Engineering_Reversing_Approaches.
4 – 02 Reverse_Engineering_x86 Architecture.
4 – 03 Reverse_Engineering_Calling_Conventions.
4 – 04 Welcome to Lab. Finding the Main Entry Point.
4 – 05 ReverseEngineering_lab_Calling_Convention.
4 – 06 ReverseEngineering_lab_Find_the_Password.
4 – 07 ReverseEngineering_lab_Binary_Patching.
5 – 01 Malware_Tricks_Anti_Debugging_and_Anti_VM_Tricks.
5 – 02 Malware_Tricks_Anti_VM_Debugging_Countermeasures.
5 – 03 Malware_Tricks_Packers.
5 – 04 Malware_Tricks_Process_Injection_and_Hollowing.
5 – 05 Malware_Tricks_Windows_Hooking_Inline_Hooking_and_Hidden_Desktops.
5 – 06 Malware_Tricks_Fast_Unpacking.
5 – 07 Malware_Tricks_Deeper_Look.
5 – 08 Malware_Tricks_Fixing_the_Import_Address_Table.
5 – 09 CMSD_Anti_Reversing.
5 – 10 CMSD_Anti_Debugging_IsDebugger_API.
5 – 11 CMSD_Anti_Debugging_BeingDebugged_Flag.
5 – 12 CMSD_Anti_VM_Red_Pill.
5 – 13 CMSD_Anti_VM_VMWare_IO_Port.
5 – 14 CMSD_Anti_Debugging_OutputDebugString_API.
5 – 15 CMSD_CreateRemoteThread.
5 – 16 CMSD_SetThreadContext.
6 – 01 Defender_Techniques_Network_Defender.
6 – 02 Defender_Techniques_Binary_Defender.
6 – 03 Defender_Techniques_Network_Detection_with_Snort.
6 – 04 Defender_Techniques_Binary_Detection_with_Yara.
7 – 01 CSMD_Gathering_IOCs.
7 – 02 CSMD_Tracing_IOCs_in_the_Code.
7 – 03 CSMD_Reversing_the_PRNG_algorithm.
7 – 04 CSMD_Reversing_the_ID_generation.
7 – 05 CMSD_Binary_Level_Detection_with_Yara.
7 – 06 CMSD_Technical_Report_Documentation.

Comments