WCU / Cybersecurity
~/CSC 471/Class 05/KP 06
Class 05 · KP 06 / 26

Threat Intel: VirusTotal and Friends

  • Search by hash to see AV verdicts, family names, first-seen dates, related samples, community notes.
  • Pivots: imphash, ssdeep, contacted domains, YARA matches.
  • Complements local analysis with the crowd's history.

OPSEC: Think Before You Upload

Uploading a file makes it visible to vendors and often the public.

For targeted / incident samples this can tip off the attacker

and leak victim data. Prefer hash lookups first; only upload when

you accept the exposure.