Advanced Cyber Threat Services(ACTS, formerly Found stone) developed this course, Forensics and Incident Response Education Analyzing Malware (FIRE-AM),to better prepare the student to respond to malware incidents in a structuredand effective way. Students should learn how to build a lab environment for thesafe handling and analysis of malware samples in a structured way. Popularmalware file formats and techniques will be discussed, as well asanti-forensics, anti-sandbox, and other evasion techniques and defenses ofmalware will be reviewed. The lessons learned during this class can aid indigital forensics and incident response (DFIR) by equipping your team with arobust malware analysis capability, a required component of a proactive threathunting program.