Similarity Search - Support for Non-Executables
Enhancements to Similarity Search now include support for all file types, improved speed, accuracy, and additional features for PE, resulting in an overall enhanced analysis experience.
All file type
Similarity search is applicable in numerous fields(close to 120 for all file types), but due to security reasons, we prefer not to disclose all of them. However, here are a few examples:
These features are carefully selected based on their ability to provide accurate and relevant results, and they are continuously updated to stay current with the latest malware trends and techniques.
| Feature group | Number of features |
|---|---|
| Apk | 22 |
| Biffopcodes | 1 |
| Emulation | 14 |
| Extracted | 10 |
| Extended data | 24 |
| Metadata | 15 |
| Segments | 6 |
| Sections | 6 |
| Strings | 5 |
| Threat indicators | 2 |
| Yara | 3 |
| Triggered consumer Ids | 1 |
Some of the features are:
Similarity Search Filters
In addition to advanced technology, Similarity Search provides multi filtering search parameters. This feature offers greater flexibility and ensures that users receive the most accurate and relevant results for their specific needs.