{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/RPISEC/Malware/tree/bbd48df47d709a702b9345e5d38cee16af3b37bd/Labs",
    "https://github.com/RPISEC/Malware/tree/bbd48df47d709a702b9345e5d38cee16af3b37bd/Lectures",
    "https://github.com/RPISEC/Malware/releases/tag/v1.0_release"
  ],
  "category": "learning",
  "description_en": "Materials from the student-run Malware Analysis course that RPISEC taught at Rensselaer Polytechnic Institute in Fall 2015, built around the book Practical Malware Analysis. Twelve lectures run from basic static and dynamic analysis, x86 and IDA through Windows internals, malware behavior, data encoding, covert launching, anti-disassembly, anti-VM and anti-debugging, and packing and unpacking to the Windows kernel and rootkit techniques, with ten labs and four projects that include runtime process manipulation, unpacking automation and an APT sample analysis.",
  "description_zh": "RPISEC 学生团队 2015 年秋季在伦斯勒理工学院（Rensselaer Polytechnic Institute）开设的恶意软件分析课程资料，课程以《Practical Malware Analysis》一书为主线。12 讲内容从基础静态与动态分析、x86 与 IDA 讲起，经过 Windows 内部机制、恶意软件行为、数据编码、隐蔽启动、反反汇编、反虚拟机与反调试、加壳与脱壳，一直讲到 Windows 内核和 rootkit 技术；另有 10 个实验和 4 个项目，涉及运行时进程操控、自动化脱壳和 APT 样本分析。",
  "entry_url": "https://awesomerea.org/resources/rpisec-malware-analysis-course/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/rpisec-malware-analysis-course/",
  "evidence_url": "https://github.com/RPISEC/Malware/blob/bbd48df47d709a702b9345e5d38cee16af3b37bd/README.md",
  "group": "learn",
  "id": "rpisec-malware-analysis-course",
  "json_url": "https://awesomerea.org/resources/rpisec-malware-analysis-course/record.json",
  "kind": "learning-resource",
  "markdown_url": "https://awesomerea.org/resources/rpisec-malware-analysis-course/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/rpisec-malware-analysis-course/index.md",
  "name": "RPISEC Malware Analysis course (CSCI 4976)",
  "name_zh": "RPISEC 恶意软件分析课程（CSCI 4976）",
  "record_type": "resource",
  "relationship": "learning",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "license"
  ],
  "requirements": [
    "The course expected working C/C++ and some assembly experience, and students read the matching book chapters before each lecture. It used a Windows 7 32-bit analysis VM, which is not distributed; the v1.0_release (2016-01-14) packages installers for the free tools used, such as IDA Free, OllyDbg, WinDbg, the Sysinternals Suite, PEiD, Regshot and Wireshark.",
    "Most lab and project samples are real malware, stored in ZIP archives encrypted with the password infected; the README says to keep them inside a proper analysis environment. Lectures were not recorded, and slides covering book material are outlines.",
    "The repository has no license file and GitHub detects no license; the reviewed master commit dates from 2017-05-11."
  ],
  "requirements_zh": [
    "课程要求学员具备 C/C++ 实用知识和一定的汇编经验，并在每次课前阅读书中相应章节。课程使用 Windows 7 32 位分析虚拟机，但该虚拟机不对外分发；v1.0_release（2016-01-14）打包了课程所用免费工具的安装程序，如 IDA Free、OllyDbg、WinDbg、Sysinternals Suite、PEiD、Regshot 和 Wireshark。",
    "实验和项目中的样本大多是真实的恶意软件，存放在以 infected 为密码加密的 ZIP 压缩包中；README 要求只在合适的分析环境中处理。课程未录制视频，涉及书中内容的幻灯片仅为提纲。",
    "仓库没有许可证文件，GitHub 也未识别出许可证；所审阅的 master 分支提交日期为 2017-05-11。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/RPISEC/Malware",
  "verification": "source-reviewed",
  "verified_at": "2026-11-05"
}