When we talk about dynamic binary analysis, and include this phase in our methodology, I cannot emphasize enough how cautious we have to be when working through this step. By its very nature, dynamic analysis involves analyzing the binary while it's running. This is why we're using virtual machines and why we'll take extra precautions to make sure that while we're working through dynamically analyzing a binary, we don't infect ourselves. If we follow along exactly as guided in Chapter 1, Setting Up the Lab, we'll also have fresh snapshots of our virtual machines, in the event we either intentionally infect our virtual machine to understand a binary better, or some other malicious result arises from our dynamic analysis. One extra precaution we can take is to disconnect the virtual network adapter in the virtual machine or disable...




















































