The growing dependency on digital systems, which accelerated immensely during the COVID-19 pandemic, also led to a massive increase in malware and particularly ransomware-related incidents in recent years.

The actors behind them may have numerous motivations, such as exfiltrating valuable information as part of espionage campaigns, gaining money by various means such as demanding ransoms, or damaging assets and reputations as a form of sabotage. Why malware analysis?Ĭyberattacks are undoubtedly on the rise, targeting governments, the military, and the public and private sectors.

Download a PDF of Chapter 1 to learn about the types of malware researchers commonly contend with, the Mitre ATT&CK framework, how to select an analysis strategy and more.Ĭheck out an interview with the authors about the goals of malware analysis, their favorite tools, the most common malware they deal with and difficulties of the malware analyst job. In the following excerpt from Chapter 1, Kleymenov and Thabet offer context around the goals and reasoning for malware analysis in threat intelligence, incident response, threat hunting and creating detections. In Mastering Malware Analysis: A malware analyst's practical guide to combating malicious software, APT, cybercrime, and IoT attacks, authors Alexey Kleymenov and Amr Thabet provide beginning malware analysts and veterans alike with everything they need to know about how and why they should analyze malware. Before starting to analyze samples, researchers must understand the reasoning for malware analysis, as well as how to conduct malware analysis in different scenarios.

Malware analysis traffic