Using the Malware Hash Registry скачать в хорошем качестве

Using the Malware Hash Registry

Speakers: Stephen Gill, Team Cymru Team Cymru will review how to make best use of a new service that has been announced recently dubbed MHR (Malware Hash Registry). The MHR service allows you to query our database of many millions of unique malware samples for a computed MD5 or SHA-1 hash of a file. If it is malware and we know about it, we return the last time we've seen it along with an approximate anti-virus detection percentage. Upon submission of a malware hash, the output of the command will return a date the sample was first seen as well as the detection rate we've seen using up to 30 AV packages. The detection rate is based on the first time we scanned the sample. The MHR compliments an anti-virus (AV) strategy by helping to identify unknown or suspicious files that we have already identified as malicious. This enables you to take action earlier than you would otherwise be able to. We also present a client side toolkit to complement your standard AV packages using this system. See more at: https://www.nanog.org/meetings/nanog4...