A malware infection today is often complex and consists of many components. To assess the extent of the intrusion, minimize the resulting damage and prevent future infections, it’s important to be able to analyze infected systems. Starting from a real infection, we will reverse engineer its components and show the timeline of events that occurred. The session will include demos with live malware.