GView: A Versatile Assistant for Security Researchers

arXiv:2404.09058v1 Announce Type: new
Abstract: Cyber security attacks have become increasingly complex over time, with various phases of their kill chain, involving binaries, scripts, documents, executed commands, vulnerabilities, or network traffic.
We propose a tool, GView, that is designed to investigate possible attacks by providing guided analysis for various file types using automatic artifact identification, extraction, coherent correlation &,inference, and meaningful & intuitive views at different levels of granularity w.r.t. revealed information. The concept behind GView simplifies navigation through all …

analysis arxiv assistant attacks automatic cs.cr cs.se cyber cyber security cyber security attacks documents file kill kill chain network network traffic researchers scripts security security attacks security researchers tool traffic types vulnerabilities