We, at Adlice Software, have started from scratch 5 years ago with a small anti-malware tool called RogueKiller.
Now on, we have developed many public and private tools to help researchers and malware analysts in their everyday job, including ourselves.
Today, I’m proud to show you the way we work with our brand new Labs, Adlice labs.
Telemetry
Our software are sending telemetry data to help us understanding how many users are using each of them, what are their needs (i.e: translations) and to give us an overview on the popularity of them.
We have developed some dashboards telling us how many scans are performed per day, and also a real-time display of connected users. Note: localizations are not stored in our database, they are in a volatile database, our stored data remain anonymous.
Every day scans
Real-time scans
Automated Signatures
The most interesting part in our labs is the automated classification and prioritization of the detections. When RogueKiller sends back all detections after a scan, everything is put into counted detection items, and sorted so that we can see what the top detections are.
If there are a false positive they can be fixed, if there are heuristic detections they can be formalized into a real signature.
Top Detections
My Items view, used by our researchers to process detection items
Malware Database
Our honeypots and automated scripts are also gathering infectious samples (virus, malware, files) and they are sent into our own MRF database. This helps us to organize the malware we receive in order to analyse them when it’s necessary.
MalwareDB
This new way to work will make our software even more efficient, this is only the beginning !
Thanks a lot for supporting us 🙂
The post Introducing: Adlice Labs appeared first on Adlice Software.
