Resecurity® Certified Malware Analysis & Reverse Engineering Professional (RCMAR)

About this course

Learn to take a suspicious file apart safely and explain what it does. Over five days you will set up an isolated lab, triage samples, and work through static, dynamic and behavioural analysis to uncover persistence, command and control and indicators of compromise.

You will then step into introductory reverse engineering, reading disassembled and decompiled code to trace the routines that matter. A case study and capstone turn your findings into malware profiles and detection ideas, preparing you for the RCMAR credential.

What you'll learn

• Build and use a safe, isolated malware analysis lab.
• Triage suspicious files quickly and decide how deep to go.
• Carry out static, dynamic and behavioural analysis of malicious software.
• Identify persistence, command and control and execution chains.
• Extract indicators of compromise and detection opportunities.
• Navigate disassembled and decompiled code to trace key routines.
• Build malware profiles that feed threat intelligence and detection teams.
• Write clear malware analysis reports for technical audiences.

Curriculum

Who it's for

Malware analysts, junior reverse engineers, threat intelligence, SOC, incident response and detection engineering professionals.

Before you start

• Basic cybersecurity, networking, Windows and Linux, and command-line skills.
• Scripting, SOC, CTI or incident response experience helps but is not required.

Prepares for