🦠 Malware
Mission domain · code
mal🔍 Lookup
📊 Pre-built Queries · Malware
📜 Playbook — Malware operations
- Direction — frame the requirement for Malware: what decision does this support, by when?
- Collection — collect from the 0 mapped domain sources and enabled feeds; capture provenance and observe OPSEC.
- Processing — normalize, de-duplicate and enrich the collected data.
- Analysis — correlate against local holdings; apply ACH; assign confidence.
- Dissemination — open a case, draft a report, share via STIX/MISP.
- Feedback — set an alert rule / watchlist to monitor for change.
⚡ AI Skills & Automation
Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).
🧩 Advanced Capabilities
✨ Enrichment pathways
🔄 Data Feeds & Datasets
| Feed | Category | Format | Status |
|---|---|---|---|
| MISP Galaxy Tools/Malware | Malware Families | json | enabled |
| Malpedia families (key) | Malware Families | json | enabled |
| URLhaus Full | Malware URLs | csv | enabled |
| URLhaus (tags/family) | Malware URLs | csv | enabled |
| MalwareBazaar Recent (hash→family) | Malware Attribution | csv | enabled |
| ThreatFox SHA256 | Malware Hashes | text | enabled |
| ThreatFox MD5 | Malware Hashes | text | enabled |
| ThreatFox Domains | Malware Domains | csv | enabled |
| MalwareWorld IPs | IP Blocklists | text | enabled |
| Maltrail Malware | Domains/URLs | text | enabled |
| ThreatView MD5 | Malware Hashes | text | enabled |
| ThreatView Domain | Malware Domains | text | enabled |
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron