The FLARE Learning Hub freely distributes quality educational content on reverse engineering and malware analysis from the FLARE team. We are excited to share with the wider security community FLARE’s nearly two decades of experience in instructing thousands of students and professionals across higher education, private industry, government, and premier conferences.
Our content emphasizes hands-on practice. Modules include demonstrations and lab exercises that reinforce the material, helping you integrate practical skills into your workflow. The modules are hosted as web-published Google Docs, while the GitHub repository contains all corresponding artifacts, including lab binaries, scripts, and disassembler databases.
We are launching today with three modules:
- Malware Analysis Crash Course: An adaptation of our foundational course that teaches the fundamental assembly skills and essential Windows knowledge necessary to begin reverse engineering Windows malware.
- The Go Reverse Engineering Reference: A comprehensive reference for reverse engineering Go executables, including three reference sections: the implementation of Go language features, the Go runtime, and Windows Go executables. Additional Go content, including labs and demos, will be released later in the year.
- An Introduction to Time Travel Debugging (TTD): This module applies WinDbg’s TTD technology to malware triage. TTD is a powerful but underutilized tool that can significantly speed up the analysis process and offer solutions to complex situations involving anti-analysis and obfuscation. This is a full release of content we previously shared through the blog post Time Travel Triage: An Introduction to Time Travel Debugging using a .NET Process Hollowing Case Study and through the Accelerating Malware Analysis with WinDbg Time Travel Debugging workshop at DEFCON 33.
We plan to publish updates and corrections to existing modules on an ongoing basis. We also have additional modules in the pipeline for the remainder of the year, so check back frequently!
While we are not currently accepting contributions to this repository, any errata, suggestions, and feedback are welcome at flare-learning-hub@google.com.
To subscribe to the FLARE mailing list for community announcements, including future releases of new Learning Hub modules, send an email with the subject "subscribe" to flare-external@google.com.