We, at Adlice Software, have started from scratch 5 years ago with a small anti-malware tool called RogueKiller. Now on, we have developed many public and private tools to help researchers and malware analysts in their everyday job, including ourselves. Today, I’m proud to show you the way we work with our brand new Labs, Adlice labs.
Telemetry
Our software are sending telemetry data to help us understanding how many users are using each of them, what are their needs (i.e: translations) and to give us an overview on the popularity of them.
We have developed some dashboards telling us how many scans are performed per day, and also a real-time display of connected users. Note: localizations are not stored in our database, they are in a volatile database, our stored data remain anonymous.
Automated Signatures
The most interesting part in our labs is the automated classification and prioritization of the detections. When RogueKiller sends back all detections after a scan, everything is put into counted detection items, and sorted so that we can see what the top detections are.
If there are a false positive they can be fixed, if there are heuristic detections they can be formalized into a real signature.
Malware Database
Our honeypots and automated scripts are also gathering infectious samples (virus, malware, files) and they are sent into our own MRF database. This helps us to organize the malware we receive in order to analyse them when it’s necessary.
This new way to work will make our software even more efficient, this is only the beginning !
Thanks a lot for supporting us 🙂
