This is a solid paper if you want to learn something about SymbEx. If it really interests you and you want something more tutorial oriented, pick up a copy of

This is a solid paper if you want to learn something about SymbEx. If it really interests you and you want something more tutorial oriented, pick up a copy of Practical Binary Analysis, out recently from nostarch. The last chapters are a tutorial intro to it using Triton. If you're a functional programmer and already know some Haskell or Ocaml or are able to pick it up quickly, check out BAP, the binary analysis platform, its got a bunch of tools/analysis built in already for this stuff and there's a fair amount of fascinating research done using or on the platform itself. https://practicalbinaryanalysis.com/ https://practicalbinaryanalysis.com/ https://github.com/BinaryAnalysisPlatform/bap https://github.com/BinaryAnalysisPlatform/bap Cool fact about BAP, there's a really weird but very cool embedded lisp that allows you to drive execution of single instructions via meta programming. It works via a term rewriting system. Seriously one of the coolest lisps I've found out in the wild. http://binaryanalysisplatform.github.io/bap/api/master/Bap_primus.Std.Primus.Lisp.html http://binaryanalysisplatform.github.io/bap/api/master/Bap_p... Also, the docs for the project are borderline decadent in their completeness and the team responsible are quite active via gitter. For real, if you're interested in binary analysis, check it out.