Emiliano Martinez

[VirusTotal @virustotal]

#MonthOfVTSearch is live!

GUI searches are quota-free all month for VirusTotal customers.

Day 1: Hunting Gamaredon-related document activity.

Follow along. One search per day. Try it, pivot, and share your results.

[VirusTotal @virustotal]

We’re thrilled to share our new collab with @huggingface , check out how we’re teaming up to boost AI safety and threat intel

https://t.co/ABtgmABxjN

[Emiliano Martinez @zenitrame]

@motuariki_ @bawitdaba3 Can you DM me?

[Emiliano Martinez @zenitrame]

@jfslowik @DrunkBinary @virustotal @snlyngaas @Bing_Chris Please check your quota and future consumption.

[Emiliano Martinez @zenitrame]

@AzakaSekai_ @DrunkBinary @jfslowik @virustotal @snlyngaas @Bing_Chris Please check your quota and future consumption.

[Emiliano Martinez @zenitrame]

@philofishal @virustotal Please check your quota and future consumption.

[Emiliano Martinez @zenitrame]

@juanandres_gs Please check your quota and future consumption.

[Emiliano Martinez @zenitrame]

@cyb3rops @M_haggis @_josehelps @mattnotmax Sounds good, ping me via email and let's set it up. Now, let's also tag them and document them (references in comments) in VT itself.

[Emiliano Martinez @zenitrame]

@dfir_justin @virustotal @Mandiant We will, any other suggestions?

[Emiliano Martinez @zenitrame]

@ali_alwashali @virustotal Any columns other than the displayed ones that you would add?

[Emiliano Martinez @zenitrame]

@malearnity @daniel_gf3 deployed a fix. Section names lead to a UnicodeDecodeError and our PE analysis tool failed to process and produce a vhash for similarity pivoting. It should now be OK.

[Emiliano Martinez @zenitrame]

@malearnity It is a PE, we should have indeed produced a vhash, let me look into it, keep you posted.

[Emiliano Martinez @zenitrame]

@pmsandstad @ChicagoCyber No, no plans. VT is about sharing threat context to improve world-wide defenses against them by empowering those that can take action (sec teams, vendors, etc.). On-prem goes against the mission of increasing world-wide visibility.

[Emiliano Martinez @zenitrame]

@ChicagoCyber This is being misunderstood. Private scanning will not be a replacement for standard VT. It does not include AV scans but rather the rest of in-house static and dynamic analysis that we have. It is only for unknown files that you would not upload to VT, gives investigative leads.

[Emiliano Martinez @zenitrame]

@kafkaesqu3 Soon it will, stay tuned. It is planned for rollout in Q4.

[Emiliano Martinez @zenitrame]

@_tallison @yvesmaurer @virustotal We offer free quota to accommodate net new file uploads. https://t.co/JeX58riBcz go down the technical support route.

[Emiliano Martinez @zenitrame]

@runasand @virustotal What can we improve to help you catch the goose?

[Emiliano Martinez @zenitrame]

@ali_alwashali @cyb3rops @malshiekh @virustotal It has always been free but only visible to registered users. This is because displaying those insights to average non-technical users can make VT very cryptic. Users that register predominantly come from the industry and higher chances they'll understand.

[Emiliano Martinez @zenitrame]

@snkhan @virustotal @karlhiramoto @entdark_