Hashing, Sandboxes, and YARA: The Free Forensics Nobody Uses
Most people treat VirusTotal like a thermometer: paste a file, get a verdict, move on. But the real forensics — sandbox behavior, relationship graphs, YARA rules — are sitting right there, unused, on free infrastructure built for exactly this. This episode walks through the identification layer of malware analysis: local hashing with SHA-256, querying MalwareBazaar by hash before ever uploading a file, escalating to VirusTotal's sandbox when the hash comes back empty, and how open-source definition libraries feed directly into the paid endpoint tools enterprises rely on. It also digs into why…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.