Azul: How to build “good” malware analysis platforms

No ratings

Presented at BSides Canberra 2026 by

_Alternatively: Azul - The Talk, or Azul - It’s Blue!_ Azul is ASD’s ACSC’s in-house malware analysis and clustering platform, designed to deal with the fast-paced and complex threat landscape that malware reverse engineers and incident responders face. This talk will describe why we have built Azul, what it does, and a technical deep-dive into how to build systems that meets both the needs of highly technical users and robustness required for large organisations. The talk will include live demos on the product’s use in real analysis situations, reflections on previous internal iterations of the product and anecdotes on what not to do when building products like this. The talk will answer why organisations might have a need for automated malware processing products like Azul and where to find our open-source release.