Malware and forensics
File Hashes in DFIR and the Ethics of Uploading to VirusTotal
Learn how hashes identify files, why SHA-256 replaced MD5, how NSRL filters known software, and why uploading a file to VirusTotal shares it.
How analysts study malicious code and what a system remembers after an incident.
Malware and forensics
Learn how hashes identify files, why SHA-256 replaced MD5, how NSRL filters known software, and why uploading a file to VirusTotal shares it.
Malware and forensics
Write a first YARA rule, match one harmless test file and not another, and learn why every rule needs positive and negative tests.
Create an account, add credits from $10 and ask the first question in the chat or the terminal.
Individual or company. You can switch to a company later without losing balance or keys.
By card, from $10. Pay per token, no subscription.
In the chat, or install the CLI and run notholy login in your terminal.