Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th)
Source: SANS Internet Storm Center
At a glance
Building your malware analysis lab is a key point before playing with malware. Today, thanks to virtualization, it's convenient to play with snapshots in your lab. Start a new investigation from a clean snapshot and take some more when you reached a critical step. But, if you need to revert to a previous snapshot, all changes applied to the VM are... lost! Therefore, it's important to store important data outside the VM.