In this lecture we will focus on investigation of malware using dedicated software such as Bro, Security Onion, Snort, etc. We will discuss how data logs should be stored and used in analysis, what are the methodologies for forensics and how to respond in case of a security incident.