Analyze suspicious hashes or files using static and dynamic analysis
Orion Malware content pack
This content pack is made to call Orion Malware API service ton analyze 2 types of inputs:
Analysis will return a report with a risk level and qualitative information about the detection.
By analyzing a file indicator, this file will be uploaded to Orion Malware server, and analyzed using default workflow for your apikey user.
By analyzing a hash observable, Orion Malware will return you a report from previous matching hashes from files analyzed on this Orion Malware server.
Extracted Observables
Orion Malware analyzer extract hostnames, domains, IP addresses, and TTP. These indicators are added as relationships to the initial file or hash indicator.
More information
Airbus Orion Malware Presentation
Orion Malware content pack
This content pack is made to call Orion Malware API service ton analyze 2 types of inputs:
Analysis will return a report with a risk level and qualitative information about the detection.
By analyzing a file indicator, this file will be uploaded to Orion Malware server, and analyzed using default workflow for your apikey user.
By analyzing a hash observable, Orion Malware will return you a report from previous matching hashes from files analyzed on this Orion Malware server.
Extracted Observables
Orion Malware analyzer extract hostnames, domains, IP addresses, and TTP. These indicators are added as relationships to the initial file or hash indicator.
More information
Airbus Orion Malware Presentation
