// Comparison

Cybersécurité et Malwares vs Evasive Malware: Which Should You Read?

Two cybersecurity books on Malware, compared honestly: who each is for, what each does best, and which to read first.

Advanced

4/52025

Détection, analyse et Threat Intelligence

Sébastien Larinier, Paul Rascagnères

Now in its 5th edition, the French-language reference for malware analysis by Sébastien Larinier and Paul Rascagnères, a well-known APT threat researcher, running from identification to Threat Intelligence across Windows, macOS, Linux, Android, and iOS.

Advanced

4/52024

Evasive Malware

A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats

Kyle Cucci

Kyle Cucci on the anti-analysis arms race: sandbox detection, anti-debug, anti-VM, packing, and the analyst-side tooling and tradecraft that get past those layers.

Read this if

French-speaking malware analysts and forensic investigators who want one comprehensive reference covering every major platform (Windows, macOS, Linux, mobile) in a single volume, through to collecting and sharing Threat Intelligence.

Malware analysts who finished Practical Malware Analysis and keep getting beaten by samples that detect their sandbox. The current reference on anti-analysis tradecraft, by a respected sandbox-and-detection practitioner.

Skip this if

Beginners with no systems or security background at all; the 687 pages cover broad, technical ground that assumes existing familiarity with systems administration and security fundamentals.

Beginners. Cucci assumes you already know how to set up a sandbox, run static and dynamic analysis, and read assembly; the book picks up where PMA leaves off.

Key takeaways

One of the few French-language references covering malware analysis across every major platform in one book, mobile included.
Rascagnères is a recognized APT threat researcher, so the content reflects real professional practice, not just academic theory.
A fifth edition with regular re-releases keeps the material broadly current, rare for a French-language technical book.

Anti-VM and anti-sandbox checks now run as the first instructions of most samples; the book catalogues the dominant patterns and how to neutralise them.
Modern packers are conceptually simple but operationally demanding; Cucci's framing of unpacking-as-staged-emulation is the cleanest in print.
Control-flow obfuscation (opaque predicates, virtualization-based protections) is the analyst's hardest current problem; the chapters on it justify the book on their own.

How they compare

Cybersécurité et Malwares and Evasive Malware are both rated 4/5 in our catalog. Pick by topic preference and reading style rather than by rating.

Both books target advanced-level readers, so the choice is about topic, not difficulty.

Cybersécurité et Malwares and Evasive Malware both cover Malware, so reading them in sequence reinforces the same material from different angles.

Keep reading

Cybersécurité et Malwares

→ Alternatives to Cybersécurité et Malwares → What to read after Cybersécurité et Malwares