Part 6

Reverse Engineering for Security Investigations

Expose concealed code and evasive behavior

Investigate packing, obfuscation, encrypted payloads, dynamic loading and anti-analysis techniques. Recover behavior that a first inspection misses, understand why an executable behaves differently under observation and identify what remains uncertain after unpacking.