Malware Detection

In order to test the capabilities of our security operations center (SOC), we will intentionally download malware samples to a test computer. The downloaded files will then be monitored by the File Integrity Monitoring features of the SOC.

The files will be checked against Yara rules and VirusTotal to determine if they are malicious. If the files are found to be malicious, the system will automatically run an active response to prevent infection and mitigate the potential risk to the network.