Some software components are innocent victims of other component coding mistakes or deliberate subversion and some start as a part of crimeware and malware but eventually become victims themselves (they crash, hang, spike, leak, are dumped, subverted, etc.) This training pack introduces novel pattern languages for the unified malware and victimware analysis by using behavioural and structural analysis patterns.

This comprehensive training for software technical support engineers, system administrators, site reliability engineers, software developers, performance engineers, testers, and legacy application maintainers features:

Slides from the training

Now includes the Revised Edition of Volume 1 in PDF format. The set is available in PDF, paperback, hardback^*, and collector's edition^** formats.

Table of Contents
Slides from the training

Now includes the 5th edition, part 1.

This training introduces unified memory dump analysis pattern language for Windows, Linux, and Mac OS X using WinDbg, GDB, and LLDB for exercises. It includes 3 training courses and online access to the vast collection of memory analysis patterns:

This training introduces novel static and dynamic malware analysis pattern languages for security researchers, system and network administrators, digital forensics and malware analysts. It includes 2 training courses, 2 seminar transcripts, a pattern reference, and online access to the vast collection of analysis patterns: