[SANS ISC] The Importance of Malware Triage

Today, I published the following diary on isc.sans.edu: “The Importance of Malware Triage“:

When dealing with malware analysis, you like to get “fresh meat”.  Just for hunting purposes or when investigating incidents in your organization, it’s essential to have a triage process to reduce the noise and focus on really interesting files. For example, if you detect a new sample of Agent Tesla, you don’t need to take time to investigate it deeply. Just extract IOCs to share …

analysis edu files focus hunting incidents isc malware malware analysis meat noise organization process sans sans.edu sans isc triage