Building and Leveraging Your Own VirusTotal, on the CheapReturn to TOC

No ratings

Presented at First 2015 by

Steven Weinstein

VirusTotal freely provides invaluable data related to malware and IOCs, and offers the ability to search and pivot throughout their dataset. Paying for access to their VirusTotal Intelligence service and Private API offer even more capabilities beneficial to security professionals. However, many companies prefer to "build vs. buy". This talk will focus on how to design and build your own VirusTotal-like system to aid in incident response or threat research while minimizing the cost to your organization. Operationalizing the resulting datasets will also be covered.