Hello and welcome everyone.
My name is Christina.
I am a trainer and coach with a strong background in software security.
For the past 10 years I've been working in banking in the street where security is a topic on a daily
basis.
I am very happy that you decided to join this course.
The aim of this course is to provide a practical approach to analyzing ransomware somewhere working
with real war samples of increasing difficulty we will deep dive into identifying the encryption techniques
navigate through various evasion tricks used by malware writers have fun discovering flaws in the logic
for the implementation and finally working out automated ways to recover the affected files.
The course begins by quickly describing the evolution of this threat across the years and multiple platforms.
Then quickly dry dives in analyzing actual samples.
Since Windows is by far the most popular target platform we focus on this operating system neither programming
experience nor assembly language knowledge are required to benefit from the course although they would
be helpful.
The concepts will be explained in a clear and concise manner and additional resources recommended.
The topics have been chosen to provide the maximum practical benefit for the participants like Janet
an idea about core programming concepts would be very beneficial when we start writing the creators
Python.
A high level language is used whenever possible to move the focus away from the code.
People understanding that the creation children logic to get the most out of discourse when he commands
to exercise all the steps described within the lectures.
Then whenever a concept or idea is not fully explained or clearly understood by the rich old with questions
or consult online for resources why they discourse.
Mostly because you like a practical malware analysis class focused on a real threat around someone somewhat
also because you're curious how Harron somewhere already forced.
And what magic do security companies use sometimes pretty covert encrypted files.
Discourse intention used to be useful and interesting to everybody involved in information security
and malware analyses from students to security testers and forensic investigators.
If you wish to further develop your skills and understand how reverse engineering works.
Many responses will be suggested along the way.
The course will explain all the features of the words used for analysis.
Bloggers these assemblers hex editors and students will be able to practice in parallel with the lectures
a lot of the concepts and analysis strategies presented here applied to analyzing malware in general
once you have completed these training course you will understand how ransomware works.
You will be capable of locating and reverse engineering the encryption routines and when possible even
create descriptors to recover your data working or working files not included or allowing you to follow
along with the author.
While the lessons
this course is for anyone interested in information security internal and malware analysis in particular
including what not only security testers malware analysts forensic investigators sees them on many straight
hours Information Security students
this course is not an introduction to Marwood.
It only focuses on the soft topic of around somewhere.
Although safety issues are presented.
This is not a tutorial on how to configure a malware analysis virtual environment.
Although generally information is presented.
This is not an elaborate high level description of somewhat solutions for thinking two or three bars.
The encryption process and recovering files are presented but this is not the course about how to prevent
around somewhat in the first place basic familiarity with reverse engineering concepts would be very
useful although not strictly strictly necessary because this is not an introduction to reverse engineering.
Although it should be obvious this is not a video on how to write better than somewhat
the lectures videos and other resources will be provided or will provide you with relevant information
about current malware analysis tricks.
You will learn how to use these assemblers and other security tools.
You will learn to identify flaws in the around somewhat cold or encryption and you will practice on
progressively difficult samples which use different concepts each you will get the practical assessment
and relevant quizzes for each section.
Source code for all the description will be also provided a clear list of recommended resources to continue
your study.
At the minimum you will have basic programming knowledge a computer that can run on Windows virtual
machine learning interesting disassembling things and understanding how they wore patience and perseverance
to try hard.
Thank you.
And seeing lecture 1.