Explore our blog

Learn how to extract IOCs and behavioral indicators to a hunting rule format for your endpoint security system.

Intezer’s solution for CrowdStrike functions as a virtual Tier 1, removing false positives and giving clear recommendations for every alert.

Automatically triage your security alerts about macOS files, processes, and endpoints by integrating with Intezer.

Get hunting for traces of Lightning Framework, a new Linux threat, using this query pack we made with osquery.

A new Linux malware we're calling Lightning Framework has modular plugins and the ability to install multiple types of rootkits.

We are helping security teams go beyond individual file analysis to automate their entire Endpoint and Email alert triage processes with our new dashboard. Autonomous SecOps provides a better, more affordable alternative to in-house Tier 1 teams or external Managed Detection & Response services.

OrBit is a new Linux malware that hijacks the execution flow, evading and gaining persistence to get remote access and steal information.

YTStealer is a new malware we believe is sold as a service on the Dark Web for stealing authentication cookies from YouTube content creators.

One of the greatest challenges SOC teams face is the high volume of daily alerts about suspicious files and endpoints to investigate.

Symbiote is a new Linux® malware we discovered that acts in a parasitic nature, infecting other running processes to inflict damage on machines.

Subscribe to threat actors/malware families in Intezer and receive notifications for new IoCs and detection opportunities.

Sigma is a universal markup language for analyzing logs, which you can use to write threat hunting and detection rules for evolving threats.

Develop advanced YARA rules based on malicious code reuse, to increase the malware detection accuracy, reduce false positives, and improve your threat hunting.