Abstract: Malware analysis and root-cause analysis, and information security insights based on Operating System sampled data. Sampled data includes structured logs, Operating System Snapshots, programs and/or processes and/or kernel crashes, crash dumps, memory dumps, stackshots, simulated crashes or samples. The sampled data contains payload for extraction for the purpose of detection, evaluation and reproduction of threats, infection vector, threat actors and persistence methods in the form of backdoors or Trojans or exploitable vulnerabilities used for initial infiltration or lateral movement.

Abstract: Methods and apparatuses for malware analysis and root-cause analysis, and information security insights based on Operating System sampled data such as structured logs, Operating System Snapshots, programs and/or processes and/or kernel crash dumps or samples containing payload for extraction for the purpose of detection and evaluation of threats, infection vector, threat actors and persistence methods in the form of backdoors or Trojans or unknown exploitable vulnerabilities used.

Abstract: Malware detection is provided via a marketplace for the analyzing and remediating of cyber-related threats and disseminating related resolution templates. An information security marketplace facilitates the ability to monetize the information obtained through and generated by an incoming attack on an organization. Actionable reports are sold to other organizations in the same market segment or region (e.g. one carrier will buy from other carriers in the same region), or AV vendors, or companies that are interested to buy such threat intelligence information, indicators, etc.