← All work
04Security
Safe static and dynamic analysis workflows — PE inspection, reverse engineering and behavioural observation in isolated environments.
Overview
A set of workflows for analysing malware samples safely, always inside isolated environments.
Workflows
- Static analysis — inspecting PE files with PE Studio and disassembling them in Ghidra without executing anything.
- Reverse engineering — following program logic in Ghidra and stepping through execution with OllyDbg.
- Dynamic analysis — running samples in isolation and observing their behaviour.
Next project
PlaySole