Lenny Zeltser
More info
- Known for
- REMnux, the SANS reverse-engineering malware course
- Affiliation
- SANS Institute
- Country
- USA
Security instructor who made malware analysis something you can learn in a week rather than a decade.
Zeltser wrote the SANS course on reverse-engineering malware, which teaches a fixed sequence: detonate the sample in an isolated lab and watch what it does, and only then open it in a disassembler. In 2003 he co-wrote Malware: Fighting Malicious Code with Ed Skoudis.
In 2010 he released REMnux, a Linux distribution preloaded with tools for dissecting malicious documents, JavaScript and executables. The point was practical: setting up an analysis environment was itself enough of a hurdle that many people gave up before they began. He has since worked as a CISO in industry.