By Staff Malware Analysis Forum Rules

[struppigel]

Malware Analysis Forum Rules

A) Sample and URL sharing

Always make sure to keep things safe

No direct download links to suspicious or malicious samples are allowed, you can instead post hashes, virustotal links, or links to automatic sandbox analysis services like any.run, hybrid-analysis, tri.age, to name a few

You must defang suspicious, unknown, or malicious URLs. To do that, replace http with hxxp and replace . with (dot)
Example of defang:
https://example.com --> hxxps://example(dot)com

B) Topics

This forum's main purpose is the discussion of malware analysis and reverse engineering techniques.

Topics you are welcome to discuss:

• malware analysis and reverse engineering related questions, e.g., techniques, analysis help if being stuck with a sample
• sharing and discussion of malware analysis learning resources, books, videos
• discussion, usage or showcase of reversing tools or services
• OS internals related to reversing
• malware hunting and detection engineering

Topics that must not be discussed here and will be deleted, locked or moved:

• opinions and discussion about antivirus products and whether or how well they detect samples
• requesting help to clean an infected system
• unpacking or cracking legal software
• game cheats and game hacking
• generic unpacking questions for VMProtect or Themida
• requests to receive a malware analysis of cracks, keygens, cheats or similar
• attribution without proper research behind it because this leads to wrong accusations
• requesting sample analysis without any context or effort on the requesters part

C) Doxxing

Doxxing or making fun of malware developers and threat actors is not allowed.
This is not only bad taste, it may also cause trouble for the forum. So just don't do it.