Zero to Hero 2021

Coursework

Chapter 1

Recognizing Encryption Algorithms in Malware: RC4

Play

Chapter 2

Understanding Common Malware Injection Techniques

Play

Chapter 3

RIG Exploit Kit Chain Internals - VBScript “CVE-2018-8174” & Flash “CVE-2018-4878” Exploit

Play

Chapter 4

Dissecting FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

Play

Chapter 5

Analyzing Shellcode Usage in Malware

Play

Chapter 6

From Office Macro Malware to Lightweight JS Loader | Deep Insight into “FIN7” Malware Chain

Play

Chapter 7

How Malware Uses Privilege Escalation to Compromise Devices | FlawedGrace RAT and Pitou Spambot

Play

Chapter 8

How Threat Actors Gain an Initial Foothold | Hanciter and ISFB

Play

Chapter 9

How TrickBot Hooking Engine Targets Windows 10 Browsers

Play

Chapter 10

Analyzing Persistence Mechanisms in Malware

Play

Chapter 11

Here we GO: Crimeware & APT, Journey From "RobbinHood" to APT28

Play

Chapter 12

YARA Hunting for Code Reuse: DoppelPaymer Ransomware & Dridex Families

Play

Read the Zero2Hero Course Posts

Crimeware | 10 minute read

Deep Insight into “FIN7” Malware Chain: From Office Macro Malware to Lightweight JS Loader

October 3, 2019

Advanced Persistent Threat | 5 minute read

FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

September 19, 2019

Crimeware | 4 minute read

RIG Exploit Kit Chain Internals

September 12, 2019

Security Research | 4 minute read

RobinHood Ransomware “CoolMaker” Functions Not So Cool

May 9, 2019

Powerful, Autonomous Endpoint Protection

SentinelOne saves you time by using multiple AI engines, providing complete visibility into all activity, and even rolling back threats with a single agent.

Predict Malicious Behavior

Autonomous monitoring and dynamic behavior tracking detect malicious activity across all threat vectors.

Rapidly Eliminate Threats

Fully-automated, integrated response capabilities eliminate threats and roll manipulated files back to trusted states.

Seamlessly Adapt Defenses

Cloud intelligence and machine learning seamlessly adapt your endpoint and server defenses against the latest malware and attacks.

Exclusive Threat

Intelligence Course

Coursework

Chapter 1

Recognizing Encryption Algorithms in Malware: RC4

Chapter 2

Understanding Common Malware Injection Techniques

Chapter 3

RIG Exploit Kit Chain Internals - VBScript “CVE-2018-8174” & Flash “CVE-2018-4878” Exploit

Chapter 4

Dissecting FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

Chapter 5

Analyzing Shellcode Usage in Malware

Chapter 6

From Office Macro Malware to Lightweight JS Loader | Deep Insight into “FIN7” Malware Chain

Chapter 7

How Malware Uses Privilege Escalation to Compromise Devices | FlawedGrace RAT and Pitou Spambot

Chapter 8

How Threat Actors Gain an Initial Foothold | Hanciter and ISFB

Chapter 9

How TrickBot Hooking Engine Targets Windows 10 Browsers

Chapter 10

Analyzing Persistence Mechanisms in Malware

Chapter 11

Here we GO: Crimeware & APT, Journey From "RobbinHood" to APT28

Chapter 12

YARA Hunting for Code Reuse: DoppelPaymer Ransomware & Dridex Families

Read the Zero2Hero Course Posts

Writing Malware Traffic Decrypters for ISFB/Ursnif

Writing Malware Configuration Extractors for ISFB/Ursnif

Info Stealers | How Malware Hacks Private User Data

Gootkit Banking Trojan | Part 2: Persistence & Other Capabilities

Gootkit Banking Trojan | Deep Dive into Anti-Analysis Features

How TrickBot Malware Hooking Engine Targets Windows 10 Browsers

Deep Insight into “FIN7” Malware Chain: From Office Macro Malware to Lightweight JS Loader

FIN6 “FrameworkPOS”: Point-of-Sale Malware Analysis & Internals

RIG Exploit Kit Chain Internals

RobinHood Ransomware “CoolMaker” Functions Not So Cool

Powerful, Autonomous Endpoint Protection

SentinelOne saves you time by using multiple AI engines, providing complete visibility into all activity, and even rolling back threats with a single agent.

Predict Malicious Behavior

Rapidly Eliminate Threats

Seamlessly Adapt Defenses

Experience the World’s Most Advanced Cybersecurity Platform