And beyond that, when I think about malware analysis,
I start to get intimidated about having to use IDA Pro or Ghidra
and open this up and start doing debugging and that kind of thing
and really getting outside of my general security operations
incident response skill set, right?
Because that's not, I'm not a computer scientist that
studied that for quite some time.
I know that's a pretty in‑depth skill set to be able to do that properly,
but that's not what we're talking about,
right?
No. There is a big difference between doing malware
analysis and doing reverse engineering.
With malware analysis,
we're going to be looking at what the malware does.
How does it affect the system?
Who does it contact on the network and so on. With reverse
engineering, you're looking at how it does that,
and you have to get into all these really complicated things with
disassemblers and debuggers, and you need to understand assembly,
which, again, like you said, is a very different skill set.
What we're going to be doing is really just looking
at what the malware is doing,
and it's really easy to do. Anybody can go in and do it.
You just need to make sure that you have your system set up
properly to do it to keep yourself safe. Technically,
the users do it all the time.
Yeah, exactly.
When they click on files that unfortunately infect their
devices with malwares, not watching it probably,
right? Right.