Mini-Module
Summary
The VirusTotal for SOC Analysts module provides structured coverage of essential concepts and techniques in VirusTotal for SOC Analysts. The module covers topics including File Analysis with VirusTotal, Introduction to VirusTotal for SOC Analysts, Key Points to Pay Attention, Scanning URLs with VirusTotal, Searching for IOC.
Recommended prior knowledge:
- General understanding of cybersecurity concepts
Introduction to VirusTotal for SOC Analysts
SOC analysts are constantly encountering suspicious malware, IP addresses, domain names, and must decide whether they are malicious or not in order to move the investigation forward. While performing the analysis of this malware, many hashes, IP, and domain data are obtained. Various online services can be used to obtain more detailed results about the collected data.
“VirusTotal” is a service that gathers many antivirus solutions in a single point and you can query and analyze them all. It was acquired by Google in 2012. It can be used in two different ways, paid and free. The parts that we will explain during the training include completely free parts.
This tutorial will show you how you can increase the information you have during file, hash, IP, domain, and URL analysis with VirusTotal. You will learn how to use VirusTotal as a SOC Analyst in the most effective way by seeing how the collected data should be interpreted and common mistakes.