CuraSec

Learn archived

SANS ISC: Testing Gemma4/Ollama for malware hash analysis via DShield

  • Engineer — Learn: Practical walkthrough of using a local LLM to enrich malware hashes against VirusTotal and CyberGordon — worth evaluating if you’re building AI-assisted triage pipelines, but no patch or configuration action required.
  • SOC/IR — Learn: Demonstrates an accessible approach to AI-assisted hash triage using Ollama and Gemma4 locally; useful context for analysts evaluating LLM integration into enrichment workflows, but yields no immediate detection or hunt action.
  • Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.