Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Today, a major problem in threat detection is that static analysis tools do not go deep enough. They often fail to extract relevant Indicator of Compromise ("IOCs") due to sophisticated obfuscation or encryption (often multi-layered). This leads to the requirement of a second stage sandbox, which in general does not scale well and is expensive.
FileScan.IO solves this problem. It is a next-gen malware analysis platform with the following emphasis:
- Providing rapid and in-depth threat analysis services capable of massive processing
- Focus on Indicator-of-Compromise (IOC) extraction and actionable context
Key Benefits
- Perform detection and IOC extraction for all common files in a single platform
- Rapidly identify threats, their capabilities and update your security systems
- Search your corporate network for compromised endpoints
- Analyze files at scale without actually executing them
- Easy reporting for entry level analysts and executive summary
- Easy deployment and maintenance
Description
YARA serves as a resource primarily designed for malware analysts to discover and categorize malware samples effectively. This powerful tool enables users to develop representations of various malware families or other entities by utilizing either textual or binary patterns. Each representation, known as a rule, comprises a collection of strings paired with a boolean expression that dictates its operational logic. Additionally, YARA-CI can enhance your toolkit by offering a GitHub application that facilitates continuous testing of your rules, which aids in detecting frequent errors and minimizing false positives. In essence, the specified rule directs YARA to flag any file that contains one of the three designated strings as a silent_banker, thereby streamlining the identification process. By incorporating YARA and YARA-CI, researchers can significantly improve their malware detection capabilities and overall efficiency in their work.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Betterscan.io
No
Filigran
No
LimaCharlie
No
Symantec Network Forensics
No
Tenzir
No
Threat.Zone
No
Uptycs
No
Integrations
Betterscan.io
Yes
Filigran
Yes
LimaCharlie
Yes
Symantec Network Forensics
Yes
Tenzir
Yes
Threat.Zone
Yes
Uptycs
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
FileScan GmbH
Founded
2020
Country
Germany
Website
www.filescan.io
Vendor Details
Company Name
YARA
Website
virustotal.github.io/yara/