Malware Analysis on sentinelchangelog.nethttp://sentinelchangelog.net/tags/malware-analysis/Recent content in Malware Analysis on sentinelchangelog.netHugo -- 0.157.0enWed, 27 May 2026 08:59:01 +0000Hunting Query: Ephemeral Code Signing Certificates for Malware-Signing-as-a-Service Detectionhttp://sentinelchangelog.net/posts/2026-05-27-pr-14308/Wed, 27 May 2026 08:59:01 +0000http://sentinelchangelog.net/posts/2026-05-27-pr-14308/New hunting query identifies short-lived code signing certificates (≤14 days) on non-developer endpoints to detect Fox Tempest MSaaS operations.Joe Sandbox Solution: ARM Template Fixes and IOC Handling Improvementshttp://sentinelchangelog.net/posts/2026-05-04-pr-14130/Mon, 04 May 2026 12:39:49 +0000http://sentinelchangelog.net/posts/2026-05-04-pr-14130/Joe Sandbox solution updated to v3.0.1 with Azure template fixes, updated storage API versions, and improved IOC processing in playbooks.Recorded Future Sandbox: Enhanced Region Support and Improved Threat Intelligence Structurehttp://sentinelchangelog.net/posts/2026-04-20-pr-14056/Mon, 20 Apr 2026 05:13:10 +0000http://sentinelchangelog.net/posts/2026-04-20-pr-14056/Recorded Future adds sandbox region configuration parameter and moves threat intelligence evidence details to comply with STIX standard structure.JoeSandbox Solution: Updated Deployment Links and Removed Manual Installation Stepshttp://sentinelchangelog.net/posts/2026-02-13-pr-13623/Fri, 13 Feb 2026 11:30:47 +0000http://sentinelchangelog.net/posts/2026-02-13-pr-13623/JoeSandbox solution deployment documentation updated with corrected Azure links and streamlined automated deployment options.New Solution: JoeSandbox Threat Intelligence and Malware Analysis Platform Integrationhttp://sentinelchangelog.net/posts/2026-01-22-pr-12801/Thu, 22 Jan 2026 09:02:45 +0000http://sentinelchangelog.net/posts/2026-01-22-pr-12801/Complete JoeSandbox solution deployment enabling automated malware analysis, threat intelligence feed ingestion, and incident enrichment playbooks for Microsoft Sentinel.VMRay Connector: Fixed Premium ARM Template Security Configurationhttp://sentinelchangelog.net/posts/2025-11-10-pr-13100/Mon, 10 Nov 2025 11:12:27 +0000http://sentinelchangelog.net/posts/2025-11-10-pr-13100/ARM template deployment fix adds mandatory TLS 1.2 enforcement and corrects resource configuration for VMRay Function App connector.