Revealing malware relationships with GraphDB: Part 1

TStillz
6 min readFeb 7, 2019

In this post, we will learn how using a Graph Database like Neo4j can help visualize malware relationships and extend these relationships to identify patterns between samples. Before we dig into Neo4j, let’s start with some fundamental graph terminologies:

Nodes represent entities such as a human, car, laptop or phone.

Properties are attributes nodes can contain. A steering wheel or tires would be a property of the “car” node.

--

--

TStillz

Posting on various topics including incident response, malware analysis, development and finance/investing automation.