Malware:ITX8060:2011:LAB3: erinevus redaktsioonide vahel
Mine navigeerimisribale
Mine otsikasti
| 6. rida: | 6. rida: | ||
* Download [https://sim.cert.ee/hw/download.pcap download.pcap] | * Download [https://sim.cert.ee/hw/download.pcap download.pcap] | ||
* Find malware download in this pcap and Extract malware or malwares | * Find malware download in this pcap and Extract malware or malwares | ||
* find out where malware was | * find out where malware was downloaded from | ||
* What malware , malwares changes in system. | * What malware , malwares changes in system. (drought process of static and or Dynamic analysis) | ||
* C&C Names and | * C&C Names and address. | ||
* document the process also Where You found hints and how exactly You did it (you need to show Your thought | * document the process also Where You found hints and how exactly You did it (you need to show Your thought | ||
and communication process - please write a summary of it.) | and communication process - please write a summary of it.) | ||
| 17. rida: | 17. rida: | ||
should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....) | should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....) | ||
Documenting in sensible manner is crucial ! | |||
Viimane redaktsioon: 6. detsember 2011, kell 19:13
Analyse an malware
Milestone: 11.12.2011 - 00:00
* Download download.pcap * Find malware download in this pcap and Extract malware or malwares * find out where malware was downloaded from * What malware , malwares changes in system. (drought process of static and or Dynamic analysis) * C&C Names and address. * document the process also Where You found hints and how exactly You did it (you need to show Your thought and communication process - please write a summary of it.) * Write an intsident raport.
consider malware analysis report reminders
should be sent to course-malware(at)cert.ee Subject should be : "studentnumber".Firstname.Lab3 File mname Sould be "studentnumber".Firstname.Lab3.(txt.odt.pdf....)
Documenting in sensible manner is crucial !