Empowering you to take on today's toughest threats.

We've uploaded our live stream from late September where we explored Detection Engineering with Yara using Assemblyline, CAPEv2, bindiff and mquery. We go over packer detection, unpacked file detection and writing dependable rules that will outlast changes by the malware author and recompilations. Enjoy!
1
10
51
1,209
Check out these new testamonials from students completing the Advanced Malware Binary Triage course! 🤩
4
9
642
Join us at 1PM EST today for a special Friday stream on detection engineering! twitch.tv/InvokeReversing
1
3
321
We've uploaded our stream from last Tuesday where we analyzed a Golang loader that uses vulnerable drivers to terminate EDR and antivirus processes before dropping Formbook. Enjoy!
2
10
52
1,979
Join us at 2PM EST today to look at a mystery Golang sample pulling a BYOVD driver from GitHub 🕵️‍♂️ twitch.tv/invokereversing
1
4
11
564
We've uploaded our live stream from August 18th where we broke Pyarmor with Frida to recover JavaScript malware payloads, enjoy!
1
18
87
3,360
We've uploaded the materials from our 3 hour workshop presented at REcon 2026 titled "C++ Symbol and Type Recovery in Binary Ninja", you can find them here: github.com/Invoke-RE/worksho… If you're interested in learning advanced malware analysis techniques, check out our new Advanced Malware Binary Triage course here: training.invokere.com/course…
39
152
6,236
We've uploaded our live stream from last Tuesday, where we analyzed a Rust loader sample with IDA Pro and RIFT that executes a Python loader, Donut loader shellcode and a Golang RAT. Enjoy!
2
18
167
6,466
Interested in virtual machine hardening? Invoke RE's intern Adam Krogsøe has been working on hardening techniques for the CAPEv2 sandbox, starting with the spoofing the PCI vendor ID that can be easily fingerprinted in QEMU. Check out his contribution here: github.com/kevoreilly/CAPEv2…
7
47
3,042
We've uploaded our live stream from June 2nd with Xusheng Li from @vector35 where we went over new advanced Time Travel Debugging (TTD) functionality in Binary Ninja.
1
15
64
5,590
Recon 2026 was a great success! We had a wonderful time teaching our workshop on Friday, meeting new folks, and catching up with old friends. Huge thanks to @cxiao__ for their assistance during Friday’s workshop. We look forward to next year!
6
39
2,591
58 page workshop manual and slides for REcon 2026 are ready. See you Friday at 1PM!
10
50
1,976
REcon 2026 is next week in Montreal! Join @JershMagersh on Friday at 1PM for a 3 hour workshop on recovering C++ Symbol and Type information with Binary Ninja
1
2
14
762
We’ve uploaded the Advanced Malware Binary Triage launch stream from last Friday. Throughout this stream, we provided an overview of the course, answered questions and analyzed a piece of malware with Binary Ninja and dnSpy. Enjoy!
1
1
10
771
Join us at 2PM EST today for a live stream with Xusheng Li from @vector35 to go over new Time Travel Debugging functionality in Binary Ninja! twitch.tv/InvokeReversing
2
15
2,774
Join us tomorrow for the AMBT Launch live stream! We will be discussing the course at length, walking through content and answering questions. twitch.tv/Invoke-Reversing
2
9
690
We are proud to announce the release of our new flagship course, Advanced Malware Binary Triage (AMBT)! The AMBT course provides a comprehensive overview of advanced techniques implemented by malware authors to bypass detection by security technologies and prevent analysis by reverse engineers. Throughout this course you will learn how to reverse engineer real-world malware variants that implement these techniques and how to implement automation methodologies to address them. This includes advanced red team tools, kernel mode drivers, and prolific crimeware (including loaders and ransomware) used in high profile attacks and takedowns. This version of AMBT uses Binary Ninja for static analysis, dynamic analysis and automation.
2
10
30
2,413
We are super excited to announce our founder Joshua Reynolds @JershMagersh will be providing a 3 hour workshop on recovering C++ symbols and type information with Binary Ninja at REcon 2026!
1
7
15
1,229
Huge congrats to @t33j_sec for completing the Binary Ninja Edition of the Introduction to Malware Binary Triage course 🥳🎊
1
3
4
440
We've uploaded our live stream from RE//verse 2026 where we sat down with @emesarecom from @vector35 to discuss WARP signatures used for symbol and type information recovery. Mason is a wealth of knowledge and it was a pleasure speaking with him at this amazing event!
1
8
29
2,582
Another great year at .@REverseConf! We are super happy to have collaborated with @emesarecom on a live stream and see everyone in person again. With hacking the Xbox One, deobfuscators used in anti-cheat engines and reverse engineering munitions, this year was packed with amazing talks from the best in the industry. We look forward to next year!
2
14
686
Our founder Joshua Reynolds will be attending RE//verse 2026! Come say hi during the conference to get some Invoke RE swag and talk to him about malware analysis and reverse engineering!
2
7
799
A few folks have asked for the intro song that we use on live streams. Here it is!
2
9
773
We've uploaded our stream from last Thursday where we analyzed the Avalon Linux bot with IDA Pro. Throughout this stream we reversed its persistence, C2 functionality, encryption and command dispatcher. Enjoy!
1
10
38
2,020
We've made bulk licensing of courses possible through our new checkout process. This allows streamlined business to business transactions where licenses can be distributed to internal students after purchase. Simply add the courses and adjust the amount of licenses at checkout 🛒
1
7
435
Our second Floxif stream from Jan 13 is up! We continued analyzing Floxif with Binary Ninja and finished our custom string types and stack string deobfuscation scripts. Enjoy!
1
4
15
926
🤩 Check out these amazing testimonials from students who recently completed the Introduction to Malware Binary Triage course!🌟
4
25
4,292
We've uploaded our stream from January 6 where we analyzed the Floxif file infector malware with control flow obfuscation using Binary Ninja. Enjoy!
1
21
131
9,922
Big news! We’ve partnered with @HexRaysSA to bring you a deep dive into a fake PuTTY installer malware campaign from July 2025! In this video, we go hands-on with IDA Pro to tear apart the binaries and uncover a hidden stealer inside. We hope you enjoy it!
2
15
89
7,545
We've uploaded the keynote Joshua Reynolds provided at BSides Edmonton 2025 titled "AI in Cyber Security: The Storm and the Compass" where he discussed the adoption applicability of AI in malware analysis and cyber security piped.video/tLR_hHQVkOk we hope you enjoy it!
1
8
4,109
The Invoke RE Black Friday Sale starts today! Get 20% off all Introduction to Malware Binary Triage courses and bundles! Offer ends December 1st.
1
4
11
1,412
Thrilled to share that our Founder, Joshua Reynolds, recently joined Gareth Davies on the #TridentTalks podcast! A must listen for blue teamers, aspiring founders, and those who want to learn about the reverse engineering and malware analysis landscape.
1
1
4
477
We've uploaded our stream from Oct 24 where we continued analyzing the SORVEPOTEL infection chain, including shellcode, Maverick.Agent.StageTwo, Maverick Agent, and a PowerShells WhatsApp worm. Big shout out to @dodo_sec, @washi_dev and @unpacme for helping with this stream.
2
4
12
1,365