Virtual Session: How to Perform Ransomware Analysis
summary
Covers different ransomware families and the kinds of organizations they target, using live demonstrations of a ransomware infection. Shows how to perform behavioral analysis (observing runtime effects) and code analysis (examining the malware itself), with examples drawn from the SANS SEC501 course.
AI-written summary · about
chapters (14)
- 0:00Introduction to ransomware
- 3:27Ransomware overview
- 5:01Ransomware characteristics
- 7:05Recent news and trends
- 9:03Notable ransomware examples
- 12:27Ransomware as a service
- 17:13Malware analysis stages
- 21:46Static properties analysis
- 23:15Behavioral analysis lab
- 27:02Essential analysis tools
- 30:56Jigsaw ransomware demo
- 38:52Code analysis techniques
- 45:08Demo: reversing Jigsaw
- 52:24Q&A and conclusion
related talks
14mThe Conjuring: ransomware edition!!
52mRansomware 101: Get Smart Understanding Real Attacks
33mLiving with Ransomware - The New Normal in Cyber Security
59mInnovation lessons we can learn from hackers
52mWhat Will it Take to Stop Ransomware?
13mData Plays the Victim: What Ransomware Has Taken from the Kidnapping and Ransom Industry
49mDissecting The Ransomware Kill Chain: Why Companies Need It
21mRansomware Attack: Lessons Learned