Scored MITRE ATT&CK verdict engine (noisy-OR confidence), ELF/PE capability inference, attribution hashes (imphash/symhash/ssdeep/TLSH), file magic + embedded-file carving, IOC extraction, YARA on file + memory dump, pcap network intel (DNS/SNI/JA3), TOML config, report schema_version. Verified on live traffic; full test + fuzz coverage."
rust sandbox static-analysis incident-response reverse-engineering dfir dynamic-analysis elf malware-analysis yara security-tools threat-intelligence mitre-attack ja3 malware-triage ioc-extraction capability-detection
-
Updated
Jul 15, 2026 - Rust