SOC Analyst Training: How to Analyze Malicious PDFs
Learn the tools and techniques that can help you identify and analyze malicious PDF files - start at 15:16 to jump into the details about static and dynamic analysis (with examples). Phishing campaigns remain one of the most popular methods used by threat actors to get into the victim’s system. Usually these attacks use carefully crafted luring messages and documents that trick users into opening and clicking on links allowing the execution of malicious code. PDF files are cross-platform, supporting links, images, and fonts which make this format very attractive for cyber criminals as they can create documents that will look valid and trick victims to engage with the document. One of the challenges incident response teams face is to quickly identify and classify the files that were used by the threat actors after an endpoint is compromised. The collected evidence contains thousands of files of different types making it harder to inspect them. In particular, PDF files make the process more time consuming because PDF files are widely used in environments, but they can carry malicious code that is hidden and encrypted inside the streams of the file. In this webinar we show: Overview of the PDF file format Attack vectors and techniques using PDF files How investigators can detect and analyze potentially harmful PDF files Learn how Intezer analyzes all types of files and helps in malware analysis investigations A live demo of analyzing PDF files using open-source tools. We will work on files that were used in several phishing attacks that eventually infected the victims with backdoors and information stealing malware SHA256, MD5, and more about each of the examples here: Example 1: https://analyze.intezer.com/analyses/... Example 2: https://analyze.intezer.com/analyses/... Example 3: https://analyze.intezer.com/analyses/... Example 4: https://analyze.intezer.com/analyses/...

SOC Analyst Training: Analyzing Microsoft Office Files Laced with Malware

SOC Analyst Training: How to Detect Phishing Emails

Can a PDF File be Malware?

REAL SOC Analyst Investigation | MALWARE DETECTED | MYDFIR FORGE

KOVTER Malware Analysis - Fileless Persistence in Registry

Cybersecurity SOC Analyst Lab - Email Analysis (Phishing)

Quality by Design: Shifting Left with Centralized Test Automation and Management

slink: WAF: Wrong Approach Firewall

Strange File in Downloads Folder? Gootloader Malware Analysis

RL for Agents Workshop - Deep Dive on Training Agents with RL and Open Source

12 Days of Defense - Day 4: How to Analyze Email Headers and How Spoofed Email Works

Deep Dive into LLMs like ChatGPT

Practical Malware Analysis Essentials for Incident Responders

how to CORRECTLY read logs as a Cybersecurity SOC Analyst

Investigating Malware Using Memory Forensics - A Practical Approach
![Nicholas Carlini - Black-hat LLMs | [un]prompted 2026](https://i.ytimg.com/vi/1sd26pWhfmg/hqdefault.jpg?sqp=-oaymwE9CNACELwBSFryq4qpAy8IARUAAAAAGAElAADIQj0AgKJDeAHwAQH4Af4JgALQBYoCDAgAEAEYciBmKDYwDw==&rs=AOn4CLBn1sRfbeYcMnkqD2mtRZhq1TO6JQ)
Nicholas Carlini - Black-hat LLMs | [un]prompted 2026

SOC Analyst Skills - Wireshark Malicious Traffic Analysis

Malware Hunting Discovering techniques in Malicious PDF

12 Days of Defense - Day 1: PDF and Office Doc Malware IOC Extraction

