IDA 9.0 Features and Syscall Malware Analysis (Stream - 2/11/2024)

In this stream we look at the IDA Pro 9.0 features, set up the new headless idalib on MacOS and continue reverse engineering a malware variant that uses direct Syscalls to unpack a headless PE stage. Learn how to reverse engineer malware: https://training.invokere.com/course/... Notes: https://github.com/Invoke-RE/stream-n... Merch: https://shop.invokere.com Twitch:   / invokereversing   Twitter:   / invokereversing   Mastodon: https://infosec.exchange/@invokerever... 0:00 Intro and IDA 9.0 Feature Discussion 14:09 IDAPython Headless Setup 24:06 Direct Syscall Malware Analysis 41:49 Headless IDAPython Continued 1:03:15 Direct Syscall Malware Analysis Continued 2:00:46 Conclusion & Wrapping Up