Malware Domain

Overview#

The Malware domain provides malware profile management for threat intelligence investigations. It enables analysts to create, track, and analyze malware samples including their capabilities, family attribution, file characteristics, and threat actor associations.

Key Features#

• Malware profile creation and management with detailed metadata
• Family attribution for categorizing malware by lineage
• Capability tracking for documenting malware behaviors
• File hash management for sample identification
• Reference linking to external intelligence sources
• Investigation association for case context
• Threat level and secrecy level classification

Use Cases#

• Cataloging malware samples discovered during cyber investigations
• Tracking malware family relationships and capability evolution
• Linking malware profiles to threat actors and investigations
• Managing file hashes for malware sample identification and correlation

Integration#

The Malware domain integrates with Investigation for case linking, Threat Intel for enrichment, and the intelligence service for AI-powered analysis.

Last Reviewed: 2026-02-05