Reverse Engineering and Threat Analysis Training in Kraków, Poland

This course provides participants with practical knowledge and hands-on skills in reverse engineering software, analyzing malware, and understanding threat behavior. It covers assembly basics, disassembly, dynamic analysis, and the use of specialized tools to dissect and understand malicious code. The course also emphasizes threat intelligence, analysis workflows, and reporting for incident response.

Introduction to Reverse Engineering & Threat Analysis

• Role of reverse engineering in cybersecurity

• Malware lifecycle and classification

• Threat analysis methodologies (MITRE ATT&CK, Cyber Kill Chain)

Fundamentals of Reverse Engineering

• Basics of CPU architecture (x86/x64)

• Assembly language essentials

• Compilers, linkers, and executables (PE/ELF formats)

• Disassembly vs. decompilation

Reverse Engineering Tools & Environment Setup

• Sandboxing and safe environments (VMs, Cuckoo Sandbox)

• Tools overview

• Setting up debuggers and disassemblers

Static Analysis Techniques

• File header analysis (PE/ELF parsing)

• String extraction and function identification

• Control flow graphs and code patterns

• Detecting obfuscation and packing

Dynamic Analysis Techniques

• Executing malware safely in sandboxes

• Monitoring processes, registry, file system, and network activity

• API call tracing and behavior profiling

• Memory dumping and unpacking

Advanced Reverse Engineering

• Manual unpacking of packed binaries

• Analyzing shellcode and exploits

• Anti-analysis techniques (anti-debugging, anti-VM)

• Deobfuscation strategies

Threat Analysis & Intelligence

• Mapping behaviors to MITRE ATT&CK techniques

• Extracting IoCs (hashes, domains, IPs, API calls)

• Correlating reverse engineering results with threat intelligence feeds

Case Studies

Hands-on Exercises

Summary and Conclusion