RCCE Course
Course #55

Malware triage Hardening Workshop: Bootcamp Module

📊 Level: Intermediate
⏱️ Duration: 2 Days
🏷️ Track: DFIR
📋 Prerequisites: DFIR foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn malware analysis triage methodologies including static analysis basics, dynamic analysis in sandboxed environments, behavioral analysis, indicator extraction, and malware classification. RCCE students will learn to perform initial malware triage to determine threat severity, extract file hashes, strings, imports, and other static indicators, execute malware in controlled sandbox environments to observe behavior, identify command and control communications, persistence mechanisms, and payload delivery techniques, classify malware by family and variant, and produce malware analysis reports that inform incident response and detection engineering efforts. This hands-on hardening course focuses on reducing attack surface through practical configuration changes and security guardrails. Building on core knowledge, RCCE students will learn to apply hardening baselines, validate configurations, and measure the security improvement achieved. Students walk away with actionable hardening checklists and the skills to maintain hardened configurations as environments evolve.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Malware triage Hardening Workshop: Bootcamp Module
🧠 What You Will Learn
  • Execute hands-on tasks for malware triage hardening workshop
  • Execute hands-on tasks for bootcamp module
  • Execute hands-on tasks for advanced cyber defense mastery
  • Explain Executive Overview fundamentals
  • Execute hands-on tasks for malware triage track — covering Rapid initial assessment of suspect files.
  • Execute hands-on tasks for hardening track — covering Apply security baselines to reduce attack surface.
  • Execute hands-on tasks for what you will achieve — covering Triage unknown malware samples in under 30 minutes.
  • Execute hands-on tasks for strategic importance
  • Execute hands-on tasks for why malware triage + hardening together? — covering Triage identifies how malware enters; hardening closes those gaps.
  • Execute hands-on tasks for core definitions
  • Execute hands-on tasks for malware triage
  • Execute hands-on tasks for static analysis
📚 Course Outline
Module 01Malware Triage Hardening Workshop
Module 02Bootcamp Module
Module 03Advanced Cyber Defense Mastery
Module 04Executive Overview
Module 05Malware Triage Track
Module 06Hardening Track
Module 07What You Will Achieve
Module 08Strategic Importance
Module 09Why Malware Triage + Hardening Together?
Module 10Core Definitions
Module 11Malware Triage
Module 12Static Analysis
Module 13Dynamic Analysis
Module 14Behavioral Analysis
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice malware triage hardening workshop: bootcamp module by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Execute hands-on tasks for malware triage hardening workshop
  • Lab 2: Execute hands-on tasks for bootcamp module
  • Lab 3: Execute hands-on tasks for advanced cyber defense mastery
  • Lab 4: Explain Executive Overview fundamentals
  • Lab 5: Execute hands-on tasks for malware triage track
📊 Skill Level
Intermediate
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Malware triage Hardening Workshop: Bootcamp Module, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI