|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/yara-basics/
课程评论：没有评论
**课程名称：** YARA 基础知识与网络安全应用 **课程概述：** 本课程旨在帮助您快速掌握 YARA 的使用，以识别潜在的恶意软件。传统的基于哈希的恶意软件检测方法容易被绕过且有时不可靠。恶意软件开发者会采用多种策略来创建新的恶意软件变种以逃避传统检测。为了克服哈希匹配的局限性，YARA 提供了一个功能齐全的模式匹配框架。 通过本课程，您将学习如何利用 YARA 的强大功能，填补您在恶意软件分析过程中的不足，从而更好地检测和响应恶意软件事件。 **核心主题和技能：** * 理解哈希匹配和模式匹配的工作原理。 * 熟悉 YARA 的模式匹配框架。 * 学习在您的系统上安装 YARA。 * 掌握编写 YARA 规则的语法。 * 创建基础和更高级的 YARA 规则。 * 通过实际案例学习如何编写有效的规则。 * 创建用于检测 Web Shells 的规则。 * 设计并实现用于检测勒索软件的规则。 * 以及更多！ **学习成果：** 完成本课程后，您将具备编写 YARA 规则的基础技能和知识，以协助检测和响应恶意软件事件。您将能够快速掌握实用的 YARA 技能，显著提升您在威胁搜寻和恶意软件分析方面的效率和效果。
In this course, you'll quickly learn to use YARA for identifying potentially malicious pieces of software.Traditional hash-based malware detections can be easily defeated and are sometimes unreliable. Malware creators use a variety of tactics to devise new malware variants that evade traditional detection. To overcome the limitations of hash-based matching, YARA gives you a full-feature pattern matching framework.Learn how to leverage YARA's capabilities to help fill the gaps in your malware analysis process, enabling you to better detect and respond to malware incidents.Key topics topics and basic skills that you'll develop are:Gain an understanding of how hashing and pattern matching workBecome familiar with YARA as a pattern-matching frameworkInstall YARA on your systemLearn the syntax for writing YARA rulesCreate your own basic and more advanced rulesDiscover how to write effective rules with practical examplesCreate a rule to look for Web ShellsDesign and implement a rule to look for ransomwareAnd more!When you're finished with the course, you'll have the basic skills and knowledge to start writing YARA rules to assist with detection and response to malware incidents.Quickly learn the right YARA skills to give your threat hunting and malware analysis skills a huge boost in efficiency and effectiveness!
