Static Malware Analysis for Incident Response: Developing a Tactical Aid with EMBER
Joel Meoak et al.
Publication Date
10-6-2025
Abstract
Incident responders face a variety of challenges when identifying malware using existing solutions, particularly when rapid tactical decisions are needed. Traditional malware detection methods are often signature-based, limiting their effectiveness to previously known threats detected by anti-virus (AV) engines. Online analysis tools introduce confidentiality risks, potentially alerting adversaries that their actions are under scrutiny. While free sandbox...