RL Spectra Advanced File Analysis and Malware Detection Suite Updates>
Reversing Labs –
ReversingLabs has announced new features for their Spectra Analyze (formerly A1000) and Spectra Detect (formerly Titanium Scale) products, aimed at improving the quality and efficiency of their platform to exceed customer needs and stay ahead of the evolving threat landscape
Spectra Analyze v9.1 Release Highlights:
– Network Threat Intelligence Improvements:
– New Network Summary page for at-a-glance visibility of key network findings
– Added valuable network metadata, including Passive DNS, WHOIS, ASN, and certificates
– URL analysis added for Spectra Sandbox (formerly RL Cloud Sandbox) with additional URL metadata and screenshots from dynamic detonations
– Search and Threat Hunting Enhancements:
– Expanded set of familiar keywords, including new group keywords to simplify finding interesting samples
– YARA Matched Strings in HEX Preview to visualize which part of the binary was matched by a given YARA rule
Spectra Detect v5.1 Release Highlights:
– Private YARA Retro Hunting:
– Customers can conduct retro-YARA queries against private, enterprise-specific files at scale
– Retro hunts can be run against local or remote storage
– Enables complete incident response workflows, allowing IR teams to retroactively investigate potentially compromised files by rapidly rescanning key historical files with updated YARA rules
ReversingLabs continues to work on improving and enhancing their solutions to meet and exceed customer needs and expectations
The Spectra suite includes Spectra Assure for software supply chain security, Spectra Detect for scalable file analysis, Spectra Analyze for malware analysis and threat hunting, and Spectra Intelligence for reputation data and intelligence.
Link: https://www.reversinglabs.com/blog/rl-spectra-advanced-file-analysis-and-malware-detection-suite-updates