Define malware analysis

Define malware analysis that captures the metadata and results of a particular static or dynamic analysis performed on a malware instance or family.

Before you begin

Role required: sn_ti.admin

Procedure

1. Navigate to All > Threat Intelligence > IoC Repository > Malware Analysis.

2. Click New.

3. Complete the fields in the form as appropriate.

   Field	Description
   Name	Enter a descriptive name to identify the intrusion set.
   Analysis Engine Version	The version of the analysis engine or product (including AV engines) that was used to perform the analysis.
   Analysis Definition Version	The version of the analysis definitions used by the analysis tool (including AV tools).
   Analysis Started	The date and time that the malware analysis was initiated.
   Analysis Ended	The date and time that the malware analysis was ended.
   Source	Specifies the threat source from which this record is created.
   Source ID	Unique identifier for this object in the threat source.
   Result	The classification result as determined by the scanner or tool analysis process.
   Result Name	The classification result or name assigned to the malware instance by the scanner tool.
   Created Time in Source	Specifies the time the object is created in the source.
   Modified Time in Source	Specifies the time the object is modified in the source.

4. Click Submit.

What to do next

Click any of the following related lists to view additional information on the objects associated with malware analysis.

Parent Topic:Malware analysis