Enriched file analysis

Prev Next

The Cloud Collector performs some basic analysis on each executable file it observes. This analysis is performed locally on the Cloud Collector . MD5 hashes, import hashes, and strings are collected from the file and forwarded to Helix for hunting and further analysis.