A hands-on intermediate course that takes you from setting up an isolated malware analysis lab through static and dynamic analysis, reverse engineering with Ghidra and x64dbg, understanding anti-analysis techniques, analyzing real malware families (RATs, ransomware, stealers), and writing YARA detection rules. Every module uses real tools and real techniques used by professional malware analysts.