How SOC analysts and threat hunters can expose malware undetected by EDR

“I want to be able to scan hashes of every file found by my EDR tool so I can quickly understand the threat they pose, and I don’t want to have to leave the EDR UI. Can you guys do that?”

This is a common question ReversingLabs gets from prospective customers. Those that are more security savvy add a further requirement, “Privacy matters to my company, so I do not want to rely on some crowd-sourced open site for file …

analysts can don edr expose file found hashes hunters malware question quickly reversinglabs scan soc soc analysts threat tool understand undetected