Malware:ITX8060:2011:LAB3: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
Resümee puudub |
|||
| (ei näidata sama kasutaja 4 vahepealset redaktsiooni) | |||
| 1. rida: | 1. rida: | ||
== Analyse an malware == | == Analyse an malware == | ||
==== Milestone: | ==== Milestone: 11.12.2011 - 00:00 ==== | ||
* Download [https://sim.cert.ee/hw/download.pcap download.pcap] | * Download [https://sim.cert.ee/hw/download.pcap download.pcap] | ||
* Find malware download in this pcap and Extract malware | * Find malware download in this pcap and Extract malware or malwares | ||
* find out where malware was | * find out where malware was downloaded from | ||
* What malware changes in system. | * What malware , malwares changes in system. (drought process of static and or Dynamic analysis) | ||
* C&C Names and | * C&C Names and address. | ||
* document the process | * document the process also Where You found hints and how exactly You did it (you need to show Your thought | ||
and communication process - please write a summary of it.) | |||
* Write an intsident raport. | * Write an intsident raport. | ||
consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ] | consider [http://zeltser.com/reverse-malware/malware-analysis-report-template.mm malware analysis report reminders ] | ||
should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....) | |||
Documenting in sensible manner is crucial ! | |||
Viimane redaktsioon: 6. detsember 2011, kell 19:13
Analyse an malware
Milestone: 11.12.2011 - 00:00
* Download download.pcap * Find malware download in this pcap and Extract malware or malwares * find out where malware was downloaded from * What malware , malwares changes in system. (drought process of static and or Dynamic analysis) * C&C Names and address. * document the process also Where You found hints and how exactly You did it (you need to show Your thought and communication process - please write a summary of it.) * Write an intsident raport.
consider malware analysis report reminders
should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....)
Documenting in sensible manner is crucial !