A Survey of Malware Forensics Analysis Techniques and Tools

With technological progress, the risk factor resulting from malware is increasing dramatically. In this paper, we present the most prominent techniques and tools used in malware forensics to combat this threat. The malware designed by attackers is multiform and has the potential to spread and harm the global economy and corporate assets every day. Thus, there is an urgent need to analyze and detect malware before important assets worldwide are damaged. In this study, we discuss various techniques for malware analysis, such as static, dynamic, hybrid, and memory forensic, as well as malware-detection techniques, such as signature, anomaly, and specification. Moreover, we present the most prominent tools used to analyze and detect malware. These tools are divided into two categories: static and dynamic. The paper focus in studying the main features and limitations of the current malware forensic techniques and tools.