- [Instructor] Let's take a look
at a real world example of a malware report.
We start out in AMP for Endpoints
where we can see a collection
of sample malware files that have been analyzed
by the Threat Grid malware analysis tool.
We start out with analysis, file analysis,
then select a sample malware file to look at.
This opens up the malware analysis report.
If we scroll down in the report,
we see the SHA256 hash of the malware file
that was analyzed.
From there we can look up the HTTP traffic
that this specific malware
has been generating.
Next, we can examine the artifacts
such as system events and networking.
And finally, we will take a look
at the actual malware being detonated
in the glove box feature of Threat Grid.
This is a very handy feature
of the malware analysis tool
that allows us to actually see what is happening
on the system while the malware is infecting it.