# ghostinthehive as a ghost in the hive

## ghostinthehive as a ghost in the hive

- [af6897cafc3603a5642fa4c5a1170473](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/readme.md): \_this blog is a work in progress\_
- [MuddyWater pt1: GHOSTBACKDOOR](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/tradecraft-analysis-defenders-catalogue/muddywater-pt1-ghostbackdoor.md)
- [Reverse Engineering](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering.md)
- [Disassemble that binary](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering/disassemble-that-binary.md)
- [C Code constructs and Assembly Primer](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering/c-code-constructs-and-assembly-premier.md): WIP
- [Dissecting a PE File](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering/dissecting-a-pe-file.md)
- [Dissecting a PE File Format Data Directories p1 Imports Exports](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering/dissecting-a-pe-file-format-data-directories-p1-imports-exports.md)
- [Dissecting an ELF File](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/reverse-engineering/reverse-engineering/dissecting-an-elf-file.md): WIP
- [Windows Internals](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals.md)
- [Windows APIs](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals/windows-apis.md): WIP - WINDOWS COMPONENTS: API / COM OBJECTS/ DEVELOPMENT COMPONENTS .. long article discussing windows components and how they are exploited in the wild.
- [Malware Unpacking](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals/malware-unpacking.md)
- [Malware Evasion through Injection pt1](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals/malware-evasion-through-injection-pt1.md)
- [Malware Evasion through Injection pt2](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals/malware-evasion-through-injection-pt2.md)
- [Malware Evasion: Anti Analysis](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/windows-internals/malware-evasion-anti-analysis.md): WIP
- [Malware Analysis](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting.md)
- [Unpacking Dridex](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-dridex.md)
- [Unpacking SmokeLoader](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-smokeloader.md)
- [Unpacking Ramnit](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-ramnit.md)
- [Unpacking Parallax](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-parallax.md)
- [Unpacking Osiris](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-osiris.md)
- [Unpacking Zloader](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/unpacking-zloader.md)
- [Heaven's gate and all the goodies](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/windows-and-malware/malware-dissecting/heavens-gate-and-all-the-goodies.md)
- [Debugging the Linux Kernel with Qemu and GDB](https://ghostinthehive.gitbook.io/ghostinthehive-as-a-ghost-in-the-hive/debugging-the-linux-kernel-with-qemu-and-gdb.md)