Quick Malware Triage With Inotify Tools, (Mon, Aug 21st)

When you handle a lot of malicious files, you must have a process and tools in place to speedup the analysis. It’s impossible to investigate all files and a key point is to find interesting files that deserve more attention. In my malware analysis lab, I use a repository called my “Malware Zoo” where I put all the files. This repository is shared across different hosts (my computer, REMnux and Windows virtual machines). This helps me to keep all the …

analysis attention called files find key lab malicious malware malware analysis point process repository tools triage