malware
Help articles tagged “malware”.
Reading the ATT&CK tab: incidents and kill-chain tactics
The ATT&CK tab fuses warning signs from a parent program and the programs it launched into one incident, scores it by how many attack stages it spans, and maps it on a 12-tactic matrix.
The Detections tab: what a risk score means
The Detections tab scores each program that is online right now from 0 to 100 by adding up warning signs it shows. At 40 or more it is worth a look, but a score is a lead, not a verdict.
The threat-intelligence feeds NetSecWall uses, and keeping them updated
NetSecWall checks every public address your apps reach against six free threat-intelligence IP lists, on your PC. They refresh daily, or on demand from Tools ▸ Feeds.
Check app hashes with VirusTotal and your own IOC list
NetSecWall fingerprints each program that goes online (SHA-256) and checks it against your own list of known-bad hashes and, with your VirusTotal API key, VirusTotal. Only the hash is sent.
Threat intelligence and behavioral detection
NetSecWall checks every remote address against six public threat lists, and separately scores each program's behavior from 0 to 100. Lists catch known-bad addresses; behavior catches new ones.