There are two main types of malware analysis: static and dynamic.
Performing static analysis of a malicious binary means concentrating on analysing its code without executing it. This type of analysis may reveal to malware analysts not only what the malware does, but also its developer’s future intentions (e.g., currently unfinished functionalities).
Dynamic analysis looks at the behaviour of the malware when it’s run – usually in a virtual sandbox. This type of analysis should reveal the malware’s behaviour and any detection evasion techniques it uses.
Malware analysis benefits security analysts by allowing them to, among other things:
* Identify hidden indicators of compromise (IOCs).
* Boost the effectiveness of IOC notifications and warnings.
* Triage incidents according to severity.
* All the malware analysis tools listed below can be freely downloaded and used.
See
7 open-source malware analysis tools you should try out - Help Net Security#
technology #
malware #
opensource #
security All the open-source malware analysis tools listed in this article are highly rated, well-maintained, and can be freely downloaded and used.