Скачать или смотреть L1V3 | Computer Architecture Fundamentals for Malware Analysis Part 2 | Storage, Networking & Binary

Welcome to the third video in our Comprehensive Windows x86 Malware Analysis Bootcamp! This session continues our exploration of computer architecture fundamentals with a focus on storage systems, networking, and programming concepts essential for effective malware analysis.

🔍 In this video, we cover:
Storage and file systems: How malware exploits NTFS features like MFT, file objects, and alternate data streams
System protection rings: Understanding the hierarchy from Ring 3 to Ring -3 and how rootkits target different levels
Firmware and IoT security: Vulnerabilities in platform and embedded firmware
Networking fundamentals: Protocol stacks and how malware establishes C2 channels
Programming languages and runtime environments: How different execution models impact malware behavior
Threading and dynamic code generation: Techniques used by advanced malware

⚡ Hands-on labs include:
Memory permission transitions and protection ring analysis
Thread-based operations and process injection detection
System call transition observation
Network communication capture and analysis

📚 Prerequisites:
This video builds directly on concepts from L1V2. We recommend watching the previous videos in this series before continuing.

⚠️ Safety Note:
All labs should be performed in an isolated VM environment with network connections disabled. Take regular snapshots to ensure you can revert if needed.

🔗 Additional Resources:
Windows API documentation: docs.microsoft.com/en-us/windows/win32/api/
https://redops.at/en/blog/direct-sysc...

Stay curious and keep exploring these concepts as we continue our journey into the fascinating world of malware analysis!