Browse › Cyber Defense Forensics Analyst Training Series
Dynamic Malware Analysis
Part of Cyber Defense Forensics Analyst Training Series · Cyber Defense Incident Responder · Malware Analysis & Reverse Engineering Topic: Blue Team
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Students will use utilize two virtual machines, inside a protected network, to observe configuration changes on a known good / clean system and all of the unusual network traffic generated by the suspect software they will be analyzing.
- On the clean system they will use Regshot, Argon Network Switcher, Process Hacker, Process Monitor and Noriben to gather details on what the suspicious program is actually doing.
- On another support machine they will set up a fake DNS server to receive all suspicious traffic, and pass that traffic over to Wireshark for further analysis.
- This lab will continue to foster tool familiarization and will provide the students an introduction to capturing network traffic by using a simple "man-in-the-middle" system.
- ⏱ About 60 minutes
- Counts towards: Cisco CCNA Cybersecurity (exam 200-201) · CompTIA CySA+ (exam CS0-004)
Scored lab. A scored lab checks your work and records a score you can see on the lab page.
Roadmaps that use this lab
- CompTIA CySA+ (CS0-004) — step 5: Incident response
- SOC Analyst — career path — step 6: Analyst certification
- SOC Analyst — career path — step 8: Malware analysis
- Cisco CCNA Cybersecurity (200-201) — step 3: Monitor with a SIEM and analyse hosts
- Threat Hunter — career path — step 3: The analyst certification
- Digital Forensics Analyst — career path — step 4: Malware, memory and document analysis
- Digital Forensics Analyst — career path — step 5: Incident response, certified
- Digital Forensics Analyst — career path — step 6: Casework, end to end
- Threat Intelligence Analyst — career path — step 2: SOC grounding, certified
