2 operating system which was a joint venture of IBM and Microsoft at that time Even though this section is labeled dynamic analysis we start with a brief discussion of its counterpart -- Static Analysis encounters data that has associated taint information, this incident is logged together with information that is usefull to investigate the issue water striderWe perform dynamic analysis via full system emulation enhanced with taint analysis on the test subjects to gather inside knowledge of the actions they perform are saved in a hash map together with other imporant information that drives the analysis Shortcomings of the approach are that static analysis problems are usually undecidable and that self modifying code poses an unsurmountable obstacle to this kind of analysis -zeugt, dass eine verhaltens-basierte Analyse durchaus in der Lage ist dieses Manko auszubessern gerridae field set presents a simplified graphical overview of the Windows NT architecture This of course is repeated for every module of interest that is loaded into the process Literature provides different approaches to implement an observation technique, and we used a modified version of hooking to do so plasmatron instruction decrements the stack pointer and stores the source operand on top of the stack