This content is open to everyone — sign in to save your progress, earn points, and unlock module exams.
Topic 2.9 of Fundamentals of Malware Analysis
The seven-step dynamic analysis workflow, three monitoring dimensions with tools, Procmon filter configuration, persistence mechanism identification, network simulation with FakeNet-NG, and building a structured behavioural report.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
External links
Sysinternals Suite — Procmon, Process Explorer, Autoruns
Official Microsoft download for the complete Sysinternals Suite. Essential tools for behavioural analysis on Windows.
FakeNet-NG — Network Simulation for Malware Analysis
Mandiant FakeNet-NG simulates network services on Windows. Included in FlareVM. Start before every dynamic analysis session.
Quadrant 4 · Self-Assessment
Fundamentals of Malware Analysis
Covers the analysis environment, PE file structure, static property examination, behavioural analysis, and dynamic code analysis of Windows executables.
REMA Complete Assessment
A comprehensive 120-question assessment covering the entire Reverse Engineering and Malware Analysis curriculum: malware taxonomy and reverse engineering fundamentals, static and dynamic analysis, reversing malicious code, malicious web and document files, in-depth analysis of packed and fileless malware, and self-defending malware techniques.
