Must Read

https://digital-forensics.sans.org/blog/2016/10/29/malware-can-hide-but-it-must-run

Malicious https Certificates: https://textslashplain.com/2017/01/16/certified-malice/