Rootkits, Spyware/Adware, Keyloggers and Backdoors: Detection and Neutralization.Rootkits: Subverting the Windows Kernel Paperback.The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System 2nd Edition.The Art of Computer Virus Research and Defense.Crimeware: Understanding New Attacks and Defenses.Reversing: Secrets of Reverse Engineeringīy Mark Russinovich, David Solomon, Alex Ionescu.The IDA Pro Book: The Unofficial Guide to the World’s Most Popular Disassembler.The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux and Mac Memory.Practical Reverse Engineering: x86, 圆4, ARM, Windows Kernel, Reversing Tools, and Obfuscationīy Bruce Dang, Alexandre Gazet, Elias Bachaalany, Sebastien Josse.Malware Analyst’s Cookbook and DVD: Tools and Techniques for Fighting Malicious Codeīy Michael Ligh, Steven Adair, Blake Hartstein, Matthew Richard.Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software.Wavelet decomposition of software entropy reveals symptoms of malicious code.Random Forest for Malware Classification.AMA: Static Code Analysis of Web Page for the Detection of Malicious Scripts.David Bianco - Hunting for Malware Critical Process Impersonation.Patterns of a Cooperative Malware Analysis Workflowīy Daniel Plohmann, Sebastian Eschweiler, Elmar Gerhards-Padilla.

Lenny Zeltser - 5 Steps to Building a Malware Analysis Toolkit using Free Tools.

Reducing Risks associated with Destructive Malware (FS-ISAC).

Guide to Malware Incident Prevention and Handling for Desktop and Laptops (NIST).

If you are aware of other helpful resources, please do submit them to for consideration. This page inventories best practices, tools and documents which the Malware Analysis SIG identified and finds useful in its work. Malware Analysis Resources Existing best practices and tools

Malware analysis traffic