Malware Analysis Fundamentals (Intermediate) (Self-Paced)

Self-paced online training with expert support

Static and dynamic malware analysis, in depth — the tools, the judgment calls, and how to write it up — taught entirely through worked example reports, no live sample required.

$1,049 12 clock hours Live Support Start anytime

This course includes

  • 12 hours of project-based training from experts
  • Answers from real instructors
  • Retake for free within 1 year
  • Access to class recordings (30 days)
  • Verified digital certificate of completion

This is the self-paced version. For live instruction, enroll in Malware Analysis Fundamentals (Intermediate).

This course covers static analysis (examining a file without running it) and dynamic analysis (observing behavior via sandbox and monitoring reports), building the judgment for which technique to use when. NIST SP 800-83 Rev. 1 is the backbone, and the real tools analysts use thread through it — disassemblers, sandboxes, YARA, network capture, and CISA's Malware Next-Gen. Dynamic analysis is taught purely through explanation and example reports; no lab, sandbox, or live sample is required. A thread on sample sensitivity, data handling, and structured reporting runs throughout.

The course finishes by pulling it together: you'll track a single sample from first triage through a written report modeled on the CISA Malware Analysis Report (MAR) format — the structure most analysts already have to produce — built to read cleanly for a technical or a leadership audience either way.

Read more

This course has a prerequisite

Incident response fundamentals (NIST 800-61) and basic forensics (NIST 800-86); comfortable with the Windows/Linux command line. Intermediate level.

Yelp Facebook LinkedIn YouTube Twitter Instagram