Knogin
[Dominios API]

Malware Domain

The Malware domain provides malware profile management for threat intelligence investigations.

Metadatos del modulo

The Malware domain provides malware profile management for threat intelligence investigations.

Volver a la Lista

Referencia de origen

content/modules/domain-malware.md

Última Actualización

5 feb 2026

Categoría

Dominios API

Checksum de contenido

9de02ac4ffe86a39

Etiquetas

api-domainsai

Documentacion renderizada

Esta pagina renderiza Markdown y Mermaid del modulo directamente desde la fuente publica de documentacion.

Overview#

The Malware domain provides malware profile management for threat intelligence investigations. It enables analysts to create, track, and analyze malware samples including their capabilities, family attribution, file characteristics, and threat actor associations.

Key Features#

  • Malware profile creation and management with detailed metadata
  • Family attribution for categorizing malware by lineage
  • Capability tracking for documenting malware behaviors
  • File hash management for sample identification
  • Reference linking to external intelligence sources
  • Investigation association for case context
  • Threat level and secrecy level classification

Use Cases#

  • Cataloging malware samples discovered during cyber investigations
  • Tracking malware family relationships and capability evolution
  • Linking malware profiles to threat actors and investigations
  • Managing file hashes for malware sample identification and correlation

Integration#

The Malware domain integrates with Investigation for case linking, Threat Intel for enrichment, and the intelligence service for AI-powered analysis.

Last Reviewed: 2026-02-05