Your First Static Triage

Headers, sections, imports, and strings — a repeatable checklist for first contact.

What you'll do

• Understand the goal and prerequisites.
• Set up your isolated environment and take a clean snapshot.
• Work through the guided steps, one checkpoint at a time.
• Review your findings and reset the environment.

# example checkpoint
$ mkdir lab && cd lab
$ # take a VM snapshot before proceeding