TN-999: GIAC Reverse Engineering Malware (GREM)

No Comments

Course Overview:

This course is designed for professionals that are expected to do malware analysis.

Attendees to TN-999: GIAC Reverse Engineering Malware (GREM) will receive TechNow approved course materials and expert instruction.

Date/Locations:

Date/Time	Event
08/05/2013 - 08/09/2013 08:00 -16:00	GIAC Reverse Engineering Malware (GREM) TechNow – San Antonio, TX, San Antonio TX
09/09/2013 - 09/19/2013 08:00 -16:00	GIAC Reverse Engineering Malware (GREM) DC/Metropolitan Area, DC/Metro Area
09/23/2013 - 10/03/2013 08:00 -16:00	GIAC Reverse Engineering Malware (GREM) TechNow – San Antonio, TX, San Antonio TX

Duration: 9 days

Course Objectives:

Toolkit and Lab Assembly
Malware Code and Behavioral Analysis Fundamentals
Malicious Static and Dynamic Code Analysis
Collecting/Probing System and Network Activities
Analysis of Malicious Document Files
Analyzing Protected Executables
Analyzing Web-Based Malware
DLL Construction and API Hooking
Common Windows Malware Characteristics in x86 Assembly
Unpacking Protected Malware
In-Depth Analysis of Malicious Browser Scripts, Flash Programs and Office
In-Depth Analysis of Malicious Executables
Windows x86 Assembly Code Concepts for Revers-Engineering Memory Forensics for Rootkit Analysis

Prerequisites:

Strong understanding of core systems and network concepts
Exposure to programming and assembly concepts
Comfortable with command line access

Comments

Latest comments from students

User: marcus.osullivan

Instructor comments: Good stuff. I like the beginning half where there was help from an additional instructor to facilitate fixing computer errors that inevitably popped up.

Facilities comments: The baby deer were neat! I like the resort.

User: bfowler1

Instructor comments: Gonna miss coming to class!

Facilities comments: WINNING!

User: niki_york

Instructor comments: incredibly knowledgeable!

Facilities comments: the new training resort is absolutely beautiful! so peaceful and serene - much more conducive to learning than the Hilton.

User: bud_winn

Instructor comments: Instructor was very knowledgeable on the course material. Having an assistant during the first week to help on labs proved ideal - we could move briskly through the labs and bypass a lot of the technical difficulties.

Facilities comments: The new facility is excellent.