Digital Forensics and Incident Response

Remnux

Remnux is a freeware commandline based utility for conducting malware analysis. Developed and maintained by Lenny Zeltser, Remnux has a variety of tools that allow analysts to examine suspicious documents, JavaScript, and other artifacts associated with malware. Further, there are tools such as Wireshark that can be utilized to not only analyze the malware but to identify network connections or traffic.

Remnux can be downloaded in a OVA file format from: https://docs.google.com/uc?id=0B6fULLT_NpxMampUWlBCQXVJZzA&export=download.

Once downloaded, the file can be converted by the analyst's select virtualization software. On the desktop are two links to .html files and a PDF document that contains all of the necessary information for ...