A repeatable malware triage workflow
Start with a fingerprint, inspect the structure, and record what the evidence supports.
The notebook
Author: Qublai Khan Ali Mirza
A first pass at a suspicious document
Preserve the original, identify the real format, and prepare structured notes for further analysis.
From indicators to a shareable report
Keep raw indicators intact while creating a readable, defanged version for a report.
CloudIntell: an intelligent malware detection system
Research into malware detection through machine learning and features extracted from executable files.
Evaluating intrusion detection across IoT environments
An anchor-based benchmark examining single- and multi-source transfer for heterogeneous domain adaptation.