Identify Rootkit and DLL Injection Activity Virtual Lab by Cybrscore

.gbi--2004274515-pFMxG8mVkquXceG6HTpnws:before { opacity: 1; background-image: url('//images.ctfassets.net/kvf8rpi09wgk/3mO0M3WnGWhLoqFr2kYwpy/ac01c3af2321a261778ad782954e1d52/Cybrscore_backdrop.jpg?w=500&q=55'); }

Create Free Account

NEED TO TRAIN YOUR TEAM? LEARN MORE

Time

45 minutes

Difficulty

Intermediate

Students will use Olly Debugger and Process Hacker to debug a suspect program and determine if any of the observed behavior is malicious or not. This lab shows one possible way malicious software hooks into legitimate programs and will provide an "under the hood" perspective on how programs work in the Windows environment.

Create Free Account

NEED TO TRAIN YOUR TEAM? LEARN MORE

Already have an account? Sign In »

This Virtual Lab is part of a Career Path: Become a SOC Analyst - Level 2

Students will use Olly Debugger to debug a suspect program and determine if any of the observed behavior is malicious or not. They will also use Process Hacker to confirm if a possible DLL injection was successful. This lab fosters an understanding of debuggers, shows one possible way malicious software hooks into legitimate programs and will provide an "under the hood" perspective on how programs work in the Windows environment.