Mapping Binaries Inside a Microsoft Azure Cloud Server

May 26, 2020

Written by

Intezer

Linux has become the “go-to” OS in cloud computing, running 90% of the public cloud workload. Linux usage has even surpassed Windows on Microsoft Azure, as reported by a Linux kernel developer from Microsoft just a few years ago.

The standard Linux cloud server comes pre-installed with over 2,000 binary files. This encompasses all core OS libraries, including user favorite tools such as bash, grep, sed, and ssh.

Using our novel Genetic Analysis technology, we created an interactive map which allows you to explore the code sharing relationship between all binary files in a standard Azure Ubuntu cloud server.

The map contains all of the 2,000+ binaries that come built-in a Microsoft Azure cloud server, in addition to the code reuse connections between them. Both technology and Linux enthusiasts can search for specific binaries, filter by specific software groups, or click on any node (representing a binary file) to see which binaries it shares code with.

Each node has a link to that specific file’s analysis report in Intezer Analyze, which displays more information about the file’s genetic makeup, including code, strings, and other metadata.

The source code, along with a Gephi version of the map, is available at github.com/intezer/Linux-binaries-map.

Visibility is Key

Having visibility in runtime is the key to detecting and responding to most cyber attacks in cloud servers. Our core technology provides code level visibility to help our customers identify the origins of all applications running in their environments.

Click here to open the Linux Binaries Map

Want code-level visibility inside your own cloud workloads? Check out our Cloud Workload Protection Platform (CWPP) which defends against unauthorized code and ensures that all applications running on your workloads are solely from trusted origins. Request a free online trial

Intezer

Count on Intezer AI SOC to triage, investigate and respond to every alert at unmatched speed and accuracy.

In this article

Share article

Mapping Binaries Inside a Microsoft Azure Cloud Server

AI SOC

AI

Company News

5 minutes

Loop engineering comes to the SOC: Introducing the Intezer Org Brain

Organizational context in an AI SOC is table stakes. Org Brain is very different. It learns, it recalls, it fetches what it's missing, and it gets sharper with every alert it touches, all autonomously.

Detection Engineering

AI SOC

8 minutes

Detection engineering in the AI era

AI is lowering the barrier to sophisticated attacks. Explore why detection engineering matters and where most programs fall short.

AI SOC

CISO

Company News

Introducing Custom Agents: Automate your SOC, your way

Add your own agents and automations on top of the ones Intezer runs out of the box, take more of the manual work off your analysts, and tailor AI SOC to the way your team actually operates.