BSides Austin has ended
Back To Schedule
Friday, April 1 • 2:00pm - 3:00pm
Virustotal Spelunking

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Employing Virus Total as a key focal point for investigation and intelligence collection.

Virustotal is employed ubiquitously to upload data and check for malicious content. Submissions, however, leave a trail of metadata that can be tracked and analyzed. Each submission also generates a mass of derivative data tha can be used to pivot off of or leveraged for further analysis. While much of that metadata is hidden behind the private paid subscription, reams of it can be accessed publicly and leveraged to collect threat intelligence. In this presentation, we will touch on some of the lesser known metadata available and how to collect and implement it in an intelligence or response capacity.


Monty St John

Monty St John is partner for ATXForensics and a frequent contributor to community and industry events.  Previous contributions have focused on research and interests in banking and healthcare security topics.  His current research focuses on harvesting the DNS for threat... Read More →

Friday April 1, 2016 2:00pm - 3:00pm CDT
High Tech Hall