Skip to main content

Principle 17: Identify Malware and Tools

No: 43065348 Date(g): 27/2/2022 | Date(h): 26/7/1443

Effective from Feb 27 2022 - Feb 26 2022
To view other versions open the versions tab on the right

Member Organizations should identify malware and tools during an attack, as well as conduct a general classification of these to use at an organizational level (e.g. Banking Trojan, Ransomware, etc.). Member Organizations can obtain information regarding the different types of malware and tools used by the threat actors using different sources, such as Indicators of Compromises (loCs), dark web, deep web, OSINT, code repositories, information sharing platforms, etc.