Windows Excellent Article

[jmpews]

恶意软件分析Blog

http://artemonsecurity.blogspot.com/?view=classic

http://www.msreverseengineering.com/blog/

恶意软件分析

// 分析旺旺客户端
https://mp.weixin.qq.com/s/xN5PWk2dK8XmhYiQEmj6Dw

// 高质量干货分析 finfisher.
https://cloudblogs.microsoft.com/microsoftsecure/2018/03/01/finfisher-exposed-a-researchers-tale-of-defeating-traps-tricks-and-complex-virtual-machines/

// 高质量干货分析 finfisher.
https://www.welivesecurity.com/wp-content/uploads/2018/01/WP-FinFisher.pdf

Windows Kernel Technique

http://www.sekoia.fr/blog/wp-content/uploads/2016/10/Rootkit-analysis-Use-case-on-HIDEDRV-v1.6.pdf