SEC536: Adversarial AI - Penetration Testing AI Systems


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact Us
An AI agent can amplify a malware analyst’s skills, but the analyst must direct it and verify its findings. Given a malware analysis toolkit, a capable model can unpack a sample, rebuild hidden executables, and decode obfuscated strings. Yet it knows mainly the common tools, and it states weak guesses as confidently as strong findings.
You’ll learn how to supply your expertise to an AI agent and get more from its work. The webinar’s case study is the open-source REMnux MCP server, which supplies such expertise to AI agents. You’ll see when to guide the agent and when to let it improvise. You’ll also learn to isolate the agent, ask it neutral questions, and verify its claims before acting on them.
You’ll leave with a pattern for encoding your expertise for AI, which applies to any field with specialized tools. You’ll also get a one-page cheat sheet for AI-assisted malware analysis.
This session supports concepts from the SANS FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques. To learn more about this course, browse upcoming runs, and access your free course preview, Click Here!


Lenny Zeltser is a cybersecurity executive with technical roots, product management experience, and a business mindset. A SANS Fellow and REMnux creator, he has built security products and programs from early stage to enterprise scale.
Read more about Lenny Zeltser