| Learning Outcomes | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 |
|---|
| Explains malware concepts, types, objectives, analysis requirements and general analysis methods. | 3 | 1 | 1 | 1 | 0 | 0 | 0 | 1 | 2 | 1 | 0 | 1 |
| Performs basic static analysis using file types, hashes, strings, metadata, file sections and import/export information. | 3 | 2 | 3 | 2 | 1 | 0 | 1 | 2 | 2 | 1 | 0 | 1 |
| Analyzes malware behavior by monitoring process, file system, registry and network activities in a controlled analysis environment. | 3 | 2 | 3 | 2 | 1 | 0 | 1 | 3 | 2 | 1 | 0 | 1 |
| Explains the functions of memory management, processor architectures, x86 registers and instruction sets in malware analysis. | 3 | 2 | 2 | 1 | 2 | 0 | 0 | 2 | 2 | 1 | 0 | 0 |
| Analyzes malware code using disassembly and debugging tools, considering arithmetic and string instructions. | 3 | 2 | 3 | 2 | 2 | 0 | 1 | 2 | 2 | 1 | 0 | 1 |
| Detects static and dynamic anti-analysis, concealment, and packing techniques and applies appropriate unpacking and counter-analysis methods. | 3 | 2 | 3 | 2 | 2 | 0 | 2 | 2 | 3 | 1 | 0 | 1 |
| Examines memory dumps, web-based malware and malicious documents using appropriate tools and methods. | 3 | 3 | 3 | 2 | 1 | 0 | 1 | 3 | 3 | 1 | 0 | 1 |
| Integrates findings obtained from different sources within advanced malware analysis, interprets technical results and communicates them clearly in accordance with ethical principles. | 3 | 3 | 3 | 2 | 1 | 0 | 2 | 3 | 3 | 2 | 0 | 2 |