Module 1
Membership
DNS Malware Analysis: A Forensic Approach (W39)
Analyze DNS-related malware behavior from a forensic perspective. Connect protocol knowledge, programming, and reverse engineering with the interpretation of suspicious activity.
Instructor · Dr. Paulo Henrique
- Modules:
- 6
- Lessons:
- 27
eForensics learning
Practical skills.
Verified progress.
What you'll learn
- Analyze DNS traffic for suspicious behavior.
- Connect program behavior with DNS-related evidence.
- Apply Python and reverse-engineering concepts to malware analysis.
Prerequisites
The skills required for this course are: programming, reverse engineering understanding of the DNS protocol. In this case, you will need know how functions work in a program flow, understand how memory share is used by malware and how network traffic is in a normal situation and a normal state. The programming language used is Python. Equipment and software: You will need to mount a virtual network containing: Windows 7 (or 10) virtual machine to mount the FLARE-VM lab and run the above tools Kali Linux and Sans Sift Workstation Debian server You will learn how to configure this network to DNS attack
Module 2
Q&A - DNS Intro
Module 3
Module 1 Lectures
Module 4
Module 1 Labs
Lessons will appear here after course content is added.
Assessments
Assignment
Required
(W39M06) The DNS Attack - lab
Assignment
Required
(W39A02) Machine configuration - lab
Assignment
Required
(W39A03) Working with Wireshark to capture DNS traffic
Assignment
Required
(W39A04) Working with w4sp virtual lab
Assignment
Required
(W39A05) Analyzing Attacker Traffic - lab
Module 5
Module 2 Lectures
Module 6
Module 2 Labs
Lessons will appear here after course content is added.
Assessments
Assignment
Required
(W39A06) Kelihos I - lab
Assignment
Required
(W39A07) Fiesta EK - lab
Assignment
Required
(W39A08) Kelihos II - lab
Assignment
Required
(W39A09) Working with samples and PCAP files - lab
Module 7
Module 3 Lectures
-
2. (W39M23) IOC
Module 8
Module 3 Labs
Lessons will appear here after course content is added.
Assessments
Assignment
Required
(W39A10) FlareVM Lab
Assignment
Required
(W39A11) IOC Lab
Module 9
Module 4
Module 10
Module 4 Labs
Lessons will appear here after course content is added.
Assessments
Assignment
Required
(W39A12) Amazon AWS Lab
Assignment
Required
(W39A13) Exploiting laaS - Lab
Module 11
Final Exam
Lessons will appear here after course content is added.
Assessments
Quiz
Required
(W39Q01) Final Exam
Course access
Unlock DNS Malware Analysis: A Forensic Approach (W39).
Enter your email. We’ll send a sign-in code here without taking you away from this course.