Mapping Binaries Inside a Microsoft Azure Cloud Server

May 26, 2020

Written by

Intezer

Linux has become the “go-to” OS in cloud computing, running 90% of the public cloud workload. Linux usage has even surpassed Windows on Microsoft Azure, as reported by a Linux kernel developer from Microsoft just a few years ago.

The standard Linux cloud server comes pre-installed with over 2,000 binary files. This encompasses all core OS libraries, including user favorite tools such as bash, grep, sed, and ssh.

Using our novel Genetic Analysis technology, we created an interactive map which allows you to explore the code sharing relationship between all binary files in a standard Azure Ubuntu cloud server.

The map contains all of the 2,000+ binaries that come built-in a Microsoft Azure cloud server, in addition to the code reuse connections between them. Both technology and Linux enthusiasts can search for specific binaries, filter by specific software groups, or click on any node (representing a binary file) to see which binaries it shares code with.

Each node has a link to that specific file’s analysis report in Intezer Analyze, which displays more information about the file’s genetic makeup, including code, strings, and other metadata.

The source code, along with a Gephi version of the map, is available at github.com/intezer/Linux-binaries-map.

Visibility is Key

Having visibility in runtime is the key to detecting and responding to most cyber attacks in cloud servers. Our core technology provides code level visibility to help our customers identify the origins of all applications running in their environments.

Want code-level visibility inside your own cloud workloads? Check out our Cloud Workload Protection Platform (CWPP) which defends against unauthorized code and ensures that all applications running on your workloads are solely from trusted origins.

Intezer

Count on Intezer AI SOC to triage, investigate and respond to every alert at unmatched speed and accuracy.

In this article

Share article

Related Articles

Company News

4 min

Intezer Workflows. The AI SOC is now complete

Detect, triage, investigate, respond. The entire SOC lifecycle now runs in one platform with AI executing and humans supervising. 

CISO

CISO Playbook: Putting Claude to work in security operations

This playbook is for security leaders who know AI belongs in the SOC, but need a practical model for where it actually fits. It’s written for CISOs, SOC leaders, detection engineers, and security teams dealing with alert volume, manual triage, reporting drag, and pressure to justify AI investment.

Company News

5 minutes

Loop engineering comes to the SOC: Introducing the Intezer Org Brain

Organizational context in an AI SOC is table stakes. Org Brain is very different. It learns, it recalls, it fetches what it's missing, and it gets sharper with every alert it touches, all autonomously.