Cheatsheets

Quick reference guides for tools, tasks, and concepts used in malware analysis.

Tools

Process Monitor (Procmon)

Tools

Process Explorer

Tools

Wireshark

Tools

FakeNet-NG

Tools

Ghidra

Tools

FLOSS (FireEye Labs Obfuscated String Solver)

Tools

CAPA

Tools

dnSpy

Tasks

How to Triage a PE File

Tasks

How to Analyze a PowerShell Dropper

Tasks

How to Build a Behavioral Timeline

Tasks

How to Write a Basic YARA Rule

Concepts

Windows API Families for Malware Analysis

Concepts

Common Persistence Mechanisms

Concepts

C2 Communication Indicators

Concepts

MITRE ATT&CK Quick Reference

Tools

x64dbg Debugger

Tools

PEStudio

Tools

CyberChef