Knogin
[Domeny API]

Malware Domain

The Malware domain provides malware profile management for threat intelligence investigations.

Metadane modulu

The Malware domain provides malware profile management for threat intelligence investigations.

Powrót do wszystkich modułów

Odwolanie do zrodla

content/modules/domain-malware.md

Ostatnia aktualizacja

5 lut 2026

Kategoria

Domeny API

Suma kontrolna tresci

9de02ac4ffe86a39

Tagi

api-domainsai

Renderowana dokumentacja

Ta strona renderuje Markdown i Mermaid modulu bezposrednio z publicznego zrodla dokumentacji.

Overview#

The Malware domain provides malware profile management for threat intelligence investigations. It enables analysts to create, track, and analyze malware samples including their capabilities, family attribution, file characteristics, and threat actor associations.

Key Features#

  • Malware profile creation and management with detailed metadata
  • Family attribution for categorizing malware by lineage
  • Capability tracking for documenting malware behaviors
  • File hash management for sample identification
  • Reference linking to external intelligence sources
  • Investigation association for case context
  • Threat level and secrecy level classification

Use Cases#

  • Cataloging malware samples discovered during cyber investigations
  • Tracking malware family relationships and capability evolution
  • Linking malware profiles to threat actors and investigations
  • Managing file hashes for malware sample identification and correlation

Integration#

The Malware domain integrates with Investigation for case linking, Threat Intel for enrichment, and the intelligence service for AI-powered analysis.

Last Reviewed: 2026-02-05