Introduction to Malware Forensics

Version 3
Created by philip Employee on Aug 20, 2014 2:20 PM. Last modified by philip Employee on Apr 21, 2016 11:15 AM.

    If you would like to purchase access to our online courses, please contact your FireEye account manager. Courses cannot be purchased or accessed from this site. Thank you.

    Type: Self-paced online course

     

    Description:

    This 8-hour course provides instruction on the steps to investigate a Windows system to determine if it is infected with malware. You will learn

    • how computer forensics practitioners preserve the state of the system or data being examined
    • what tools they use to examine a system and build a timeline of events
    • common malware attachment points in the Windows operating system

     

    Outline:

    1. Initial Incident Response Processes and Preservation of Evidence
    2. Preserving Memory
    3. Creating and Preserving Disk Images
    4. Common Methods of Malware
    5. Investigative Techniques
    6. Reporting

     

    SKU: EDU-OWT-BSC-FO2