Right.
And there's a ton of setup to this. As you download these
tools and install everything, you're going to get a better
understanding of Windows Internals,
which helps because you're running Process Monitor, and maybe you
don't understand why everything's on there.
You have registry calls, you have API calls, you have file opening and
closing that if you haven't done like C++ coding,
you don't really know what that looks like for I/O streams and stuff.
This is a really good way to learn that. And once you've got
all this set up and you're good to go, remember,
take your snapshots. We're going to be ready to analyze malware.
So we're setting up now.
We've got our hardware done. That's looking realistic. We have our OS looking
realistic and ways to work with that, and now we have a good baseline for
tools. ‑We have our tools installed. ‑And from here,
if you've watched this,
you can now follow along. The point is we're not going to come
back to this. You can now follow along with the rest of the
Play by Plays where we analyze, you know,
whatever new, hot malware is going on and identify what's going
on with it and as well as some IoCs and maybe even some new ICs
that haven't been discovered yet,
which would be kind of cool. Right. ‑And that's kind
of where we're moving forward.
So if you need to come back to this and you find this to help set up,
then great.
If you have any questions,
feel free to reach out to Tyler, me about how to set things up. And there's
going to be a ton of stuff in the demo files, not just the resources, but
we'll add anything else we have. We have configs, we have tools, and we'll
update that as we go if we use other tools that we think are cool you can set
up, maybe even some config guides.
I'm sure we'll get some guides going on this,
too, which I think will be really good. And from here,
I just want to thank you for doing this with us, and I'm
really excited to get started using this.
Yeah, me too.
‑Yeah, great.