ConceptsNetwork Behavior Analysis

Network Behavior Analysis

In malware analysis, examining the network activity a sample produces, DNS lookups, connections, command-and-control traffic, downloads, to understand its capabilities and extract network indicators.

Glossary definition

7 direct links6 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Malware Lab Setup

The foundation Network Behavior Analysis builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Malware Lab SetupStart here

An isolated environment built for safely analyzing malware, with network segmentation, snapshots, and the tools needed for static and dynamic analysis, so samples can be examined without risking production or the analyst's host.

lessons

Relatedsorted by lesson coverage

Indicators of Compromise

lessons

Dynamic Analysis Methodology

lessons

Process Monitor Analysis

lessons

RAT Analysis

lessons

Command and Control

lessons

Beacons

lesson

Related Lessons

6 lessons cover this concept

Questions, Evidence, and Lab Safety

SOC Analyst

Static Triage and Hypothesis Building

SOC Analyst

Controlled Behavioral Analysis

SOC Analyst

Targeted Disassembly and Deobfuscation

SOC Analyst

Yara Engineering and Analysis Reporting

SOC Analyst

Capability Patterns and Incident Response

SOC Analyst