We've got a big announcement! We have now rolled out the 1st version of Triage for Linux! 🔸Analysis on AMD64 (x86 and x64 exes), ARM, and MIPS platforms 🔸Live VM interaction through a root terminal Check out our new blogpost for more information! hatching.io/blog/triage-fo…

In our Triage Thursday blog this week, we have some updates for Excel 4.0 handling, and Casperinous takes a look at some of the changes we've seen in macros during 2020. Find the blog here - hatching.io/blog/tt-2020-1…

What I really like about the reports generated by Hatching's Triage is that they extract configs from well-known malware families SmokeLoader tria.ge/201224-89af9qf… CobaltStrike tria.ge/201213-599sgkp… Trickbot tria.ge/201216-ax9drre…

Time for our first Triage Thursday blog of 2021! We've got a shiny new Dashboard for you, along with a bunch of updates for family detections and configuration extractors. Find the full details here - hatching.io/blog/tt-2021-0…

In Triage Thursday this week we have a lot of new web UI features to show you. Submit dropped files; Dark Mode; Overview update and more! Also changes to detection for families such as Gozi and IcedID Find the full list of changes in the blogpost here: hatching.io/blog/tt-2021-0…

We've got a big pile of updates for you in today's Triage Thursday blogpost! Updated family detections, improved #CobaltStrike and #Gozi extractors, and a range of new families supported. Check the post out here 👇 hatching.io/blog/tt-2021-0…

Busy day today - we've just pushed a few updates to tria.ge detections. First, we noticed a new variant of #Smokeloader that has moved away from the normal XOR-based C2 decryption routine, dodging our extractor. This has now been fixed tria.ge/210221-7z552jc…

In this week's Triage Thursday blogpost we introduce a brand new feature - custom Yara rules! Add your own rules to be run against new analyses you submit - sample, dropped files and memory dumps included! For more details take a look at the full post: hatching.io/blog/custom-ya…

We've got a nice surprise for you today! To celebrate recently passing 3k users we have been working hard on a new UI overhaul for Triage. Check it out! 👇 tria.ge/210401-7fl39d7…

#ICYMI in our blogpost yesterday - Hatching is hiring! We're looking for a Senior Go Developer to join our team and help us with the continued development of Triage. Remote no problem, but bonus points if you're in the Netherlands Full listing here: hatching.io/jobs/senior-go…

Triage now supports macOS analysis! This is only the start of our journey, but v1 is now available for public users. 🔸Run samples in 10.15 Catalina 🔸Interact with VMs in realtime 🔸Easily access dropped files Read all about it in this week's blogpost: hatching.io/blog/triage-fo…

It's Triage Thursday! In the news today: 🔸#Emotet config extractor 🔸New #BazarLoader C2 extraction 🔸x64 and ELF #SystemBC payloads 🔸Updated #Gozi pubkey extraction 🔸Updated #Vidar and #Arkei config extraction Check out the full blogpost here: hatching.io/blog/tt-2021-1…

It's time for our final Triage Thursday blogpost of 2021! It's been quite a year, so today we're taking a look back at the progress we've made and where Triage is now. Join us as we look at statistics from the year, and review some of the major updates: hatching.io/blog/2021-revi…

We are excited to announce that Cybersprint is acquired by Darktrace. Our Attack Surface Management solution will enrich Darktrace's Detect & Respond products. We're looking forward to this fantastic step in Cybersprint's journey! Read the press release. hubs.li/Q014J_Ky0

If you haven't seen it yet, improvements to our Live and Replay Monitors on Triage went live earlier 🔸Motivational video to help you through the work day 🔸Advanced 7th generation AI assistant to help with your malware analysis needs Check it out at tria.ge!

In our blog this week we're excited to announce that Hatching has been acquired by Recorded Future! We look forward to working with their team to continue expanding and improving Triage for a long time to come. Full details here: hatching.io/blog/acquisiti…

Thrilled with Recorded Future and Hatching joining forces. I want to emphasize that tria.ge, the free version of the Hatching Cloud Sandbox will continue to be freely available forever. Try out your malicious file samples at tria.ge. Enjoy!

Just to double down on tria.ge being free to use for ever. Nothing changes here in light of recent news :)

Hatching is hiring! We've opened up 2 new positions with our team as we look to our plans for 2025 and beyond: 🔸Senior Software Engineer 🔸Malware Analyst Both are remote roles; ideally in The Netherlands or Sweden, but same timezone is also possible hatching.io/jobs/