Stairwell (v1.0.22)
Inception is a security intelligence engine that automates the continuous capture, storage, and analysis of executable files.
- Author
- Stairwell
- Support
- partner
- URL
- https://www.stairwell.com
- Categories
- Data Enrichment & Threat Intelligence
Integrations (1)
- Stairwell Inception
README
Stairwell Inception
Inception’s APIs leverage auth tokens via the web interface. Directions for generating these tokens, along with API documentation, are available within your Inception tenant.
Not a customer and interested in signing up? You can request access here.
Variant Discovery
- This command enables rapid, DFIR-level hunts for variants of a provided hash. This hunt will leverage data from your organization, along with Inceptions shared malware corpus.
- The results will include any variant file hashes discovered, along with a
similarityscore.
File Enrichment
This command enables instant enrichment of a provided hash. This enrichment will leverage data from your organization, along with Inceptions shared malware corpus.
The results will include:
- Hash details
- Seen asset(s)
- Matching YARA
- AV verdicts
- Path/filename details