MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

Critical classification

master
Alexandre Dulaunoy 2014-01-13 07:16:18 -08:00
parent e5f77bfe0f
commit 0f21355801
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
Use-cases.md

@ -23,3 +23,8 @@ Attribution
* Multiple malwares are investigated at the same time by different entities
* They all contain the same highly specific mutex and can be connected and help to identify the attacker
Malware analysis and critical classification
============================================
* A analyst is reversing a malware but doesn't know the level of risk with the associated (lack of context)
* The analyst enters the indicators into MISP to check if some other events (with a proper context) are triggered