Documentation rendue
Cette page rend le Markdown et Mermaid du module directement depuis la source publique de documentation.
Overview#
The Malware domain provides malware profile management for threat intelligence investigations. It enables analysts to create, track, and analyze malware samples including their capabilities, family attribution, file characteristics, and threat actor associations.
Key Features#
- Malware profile creation and management with detailed metadata
- Family attribution for categorizing malware by lineage
- Capability tracking for documenting malware behaviors
- File hash management for sample identification
- Reference linking to external intelligence sources
- Investigation association for case context
- Threat level and secrecy level classification
Use Cases#
- Cataloging malware samples discovered during cyber investigations
- Tracking malware family relationships and capability evolution
- Linking malware profiles to threat actors and investigations
- Managing file hashes for malware sample identification and correlation
Integration#
The Malware domain integrates with Investigation for case linking, Threat Intel for enrichment, and the intelligence service for AI-powered analysis.
Last Reviewed: 2026-02-05