- Level Foundation
- المدة 21 ساعات hours
- الطبع بواسطة IBM
-
Offered by
عن
Malicious software, or malware, is typically delivered over a network and is designed to cause disruption to a computer, client, server, or network. Disruptions can include leaked private information, unauthorized access to information or systems, blocked user access, interference with security and privacy, or numerous other variations of attacking systems. Malware analysis dissects malware to gather information about the malware functionality, how the system was compromised so that you can defend against future attacks. Assembly is a low-level language that is used to communicate with the machine. Assembly programming is writing human-readable machine codes or machine instructions that are directly read by the computer. All high-level languages compiled programs like C or C++ can be broken down, analyzed, and understood using Assembly language with the help of a debugger. This process is known as reverse engineering. Understanding what an executable program does is easy if you have direct access to the source code. But if not, such as the case with malware, learning Assembly can be helpful. In this course, through video demonstrations, hands-on reverse engineering, and capture-the-flag type activities, you will be introduced to the processes and methods for conducting malware analysis of different file types. You will analyze native executable files, and analyze popular files like PowerShell, JavaScripts, and Microsoft Office documents. Then you will learn the fundamentals of Assembly language, basic Win32 Assembly programming concepts, and how Reverse Engineers use Assembly to analyze malware.الوحدات
Malware analysis overview
1
Videos
- Malware analysis introduction
1
Readings
- Course overview
Malware analysis process
1
Assignment
- Malware analysis process knowledge check
1
Videos
- Malware analysis process
Module 1 assessment
1
Assignment
- Module 1 assessment
Set up a testing VM environment on your personal system
1
Assignment
- Flare-VM knowledge check
4
Videos
- Lab setup
- Lab setup demo
- Flare-VM
- Capture the Flag exercise demo
10
Readings
- Virtual Machine setup overview
- Virtual Machine setup steps
- VM Setup Exercise 1: Install VirtualBox or VMWare
- VM Setup Exercise 2: Download and install Windows Guest (Windows 11)
- VM Setup Exercise 3: Install Guest tools
- VM Setup Exercise 4: Install Flare-VM
- VM Setup Exercise 5: Install REMnux guest
- VM Setup Exercise 6: Install Microsoft Office and Adobe Acrobat Reader
- Capture the Flag exercises and Analytic Tools
- Download exercise and sample files
Module demos
1
Readings
- Module demos
Static analysis
3
Assignment
- Static analysis knowledge check
- Static analysis demo knowledge check
- CTF exercise: Static Analysis
2
Videos
- Static analysis
- Static analysis demo
2
Readings
- Capture the flag exercise: Static Analysis
- CTF exercise
Dynamic analysis
3
Assignment
- Dynamic analysis knowledge check
- Dynamic analysis demo knowledge check
- CTF exercise: Dynamic Analysis
3
Videos
- Dynamic analysis
- Dynamic analysis demo part 1
- Dynamic analysis demo part 2
2
Readings
- Capture the flag exercise: Dynamic Analysis
- CTF exercise
Module 3 assessment
1
Assignment
- Module 3 assessment
Module demos
1
Readings
- Module demos
Code reversing
3
Assignment
- Manual code reversing knowledge check
- Manual code reversing demo knowledge check
- CTF exercise: Manual code reversing
4
Videos
- Manual code reversing
- Manual code reversing demo part 1
- Manual code reversing demo part 2
- Manual code reversing demo part 3
2
Readings
- Capture the flag exercise: Manual code reversing
- CTF exercise
Module 4 assessment
1
Assignment
- Module 4 assessment
Module demos
1
Readings
- Module demos
Analyze PowerShell scripts
2
Assignment
- Analyzing PowerShell scripts knowledge check
- CTF exercise: Analyze PowerShell scripts
1
Videos
- Analyzing PowerShell scripts
2
Readings
- Capture the flag exercise: Analyze PowerShell scripts
- CTF exercise
Analyze JavaScripts
2
Assignment
- Analyzing JavaScripts knowledge check
- CTF exercise: Analyze JavaScripts
2
Videos
- Analyzing JavaScripts part 1
- Analyzing JavaScripts part 2
2
Readings
- Capture the flag exercise: Analyze JavaScripts
- CTF exercise
Analyze macro-enabled documents
2
Assignment
- Analyzing macro-enabled documents knowledge check
- CTF exercise: Analyze Macro-enabled documents
1
Videos
- Analyzing macro-enabled documents
2
Readings
- Capture the flag exercise: Analyze Macro-enabled documents
- CTF exercise
Module 5 assessment
1
Assignment
- Module 5 assessment
Module demos
1
Readings
- Module demo
Set up REMnux
1
Assignment
- Set up REMnux knowledge check
2
Videos
- Set up REMnux
- Set up Fakenet-NG in REMnux
Analyze ELF file format
2
Assignment
- Analyzing ELF file format knowledge check
- CTF exercise: Analyze ELF file format
1
Videos
- Analyzing ELF file format
2
Readings
- Capture the flag exercise: Analyze ELF file format
- CTF exercise
Module 6 assessment
1
Assignment
- Module 6 assessment
Module demos
1
Readings
- Module demos
Analyze ASPX webshell
2
Assignment
- Analyzing ASPX webshell knowledge check
- CTF exercise: Analyze ASPX webshell
1
Videos
- Analyzing ASPX webshell
2
Readings
- Capture the flag exercise: Analyze an ASPX webshell
- CTF exercise
Analyze a JAR
2
Assignment
- Analyzing JAR knowledge check
- CTF exercise: Analyze JAR
1
Videos
- Analyzing JAR
2
Readings
- Capture the flag exercise: Analyze JAR
- CTF exercise
Module 7 assessment
1
Assignment
- Module 7 assessment
Malware Analysis summary
1
Videos
- Malware Analysis summary
Introduction to Assembly
1
Assignment
- Introduction to Assembly knowledge check
2
Videos
- Intro to Assembly
- What is Assembly Language?
Assembly language basics
1
Assignment
- Assembly language basics knowledge check
1
Videos
- Assembly language basics
Commonly used Assembly instructions
1
Assignment
- Commonly used Assembly instructions
2
Videos
- Commonly used Assembly instructions
- Assembly Language step thru
Win32 Assembly programming
1
Videos
- Learning Win32 Assembly programming
Module 8 assessment
1
Assignment
- Module 8 assessment
1
Readings
- Additional resources
Earn an IBM digital badge
1
Readings
- Earn the badge
Auto Summary
Explore the world of malware analysis and assembly language with this foundational IT & Computer Science course from Coursera. Led by expert instructors, you'll learn to dissect malware, understand system compromises, and defend against future attacks. Delve into assembly language, reverse engineering, and analyze executable files through engaging video demonstrations and hands-on activities. With a duration of 1260 minutes, choose between Starter and Professional subscription options to suit your learning needs. Ideal for beginners eager to enhance their cybersecurity skills.

IBM Skills Network Team