OSIR

OffSec Incident Responder (OSIR, IR-200)

Malware TriageEnglish
Exam overview

Practice session

An IR analyst needs to triage a suspect Windows binary without executing it. Which static-analysis step provides the QUICKEST 'is this packed/encrypted' signal?

Loading your practice session…