NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Forensics
Dynamic Analysis
Master dynamic malware analysis. Learn to safely execute malware in an isolated sandbox, monitor behavior with Procmon and Wireshark, and extract behavioral IOCs.
Room tasks
1What Is Dynamic Analysis and Why Does It Matter
2Monitoring Process, File & Registry Behavior
3Analyzing Network Behavior of Malware
4Guided Lab: Dynamic Analysis in a Sandbox
Frequently Asked Questions
What is dynamic malware analysis?
Dynamic analysis runs a suspicious sample in a controlled environment and observes what it does, including file changes, registry edits, processes and network traffic. It reveals real behaviour that static review can miss.
Which tools help with dynamic analysis?
Process Monitor tracks file and registry activity, Wireshark captures network traffic, and Sysmon logs process and network events. Together they build a clear picture of what malware does.
Is it safe to run malware for analysis?
Only in an isolated lab with snapshots and no route to production. This free intermediate Codelivly room teaches how to detonate samples safely and record their behaviour.