Membership

Analyzing malicious documents (W32)

Learn to investigate potentially malicious documents in a controlled environment. Explore document-analysis techniques and the evidence they reveal. This is an earlier course edition; examples reflect the tools and versions used when it was recorded.

Instructor · Ali Abdollahi

Modules:
4
Lessons:
47

eForensics learning

Practical skills.
Verified progress.

What you'll learn

  • Prepare a controlled environment for document analysis.
  • Examine potentially malicious documents with the course tools.
  • Interpret findings from the practical analysis exercises.

Prerequisites

Basic security knowledge and practical familiarity with Linux. Use an isolated virtual environment for the exercises.

Module 2

Module 1

  1. 1. (W32M01) Introduction to malware

  2. 2. (W32M02) Spreading Techniques

  3. 3. (W32M03) Attack scenarios

  4. 4. (W32M04) IoC and YARA

  5. 5. (W32M05) Lab Setup

  6. 6. (W32M06) exiftool

  7. 7. (W32M07) oleid

  8. 8. (W32M08) Module 1 - Lab 1

  9. 9. (W32M09) Module 1 - Lab 2

  10. 10. (W32M10) MS Office document structure

  11. 11. (W32M11) MS Office document static analysis

  12. 12. (W32M12) YARA

  13. 13. (W32M13) Malscanner

  14. 14. (W32M14) Tools - continued

  15. 15. (W32M15) Offevis

  16. 16. (W32M16) XOR

  17. 17. (W32M17) Olevba

  18. 18. (W32M18) MS Office document dynamic analysis

  19. 19. (W32M19) MS Office document dynamic analysis - Fakenet lab 1

  20. 20. (W32M20) MS Office document dynamic analysis - Fakenet lab 2

  21. 21. (W32M21) ViperMonkey

  22. 22. (W32M22) MS Excel - Lab

  23. 23. (W32M23) MS PowerPoint - Lab

Assessments

Assignment Required

(W32A01) Module 1 Exercises

Module 5

Final exam

Lessons will appear here after course content is added.

Assessments

Quiz Required

(W32Q01)

Course access

Unlock Analyzing malicious documents (W32).

Enter your email. We’ll send a sign-in code here without taking you away from this course.