Frequently asked questions
[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”3.22.4″][et_pb_row _builder_version=”3.22.4″][et_pb_column type=”4_4″ _builder_version=”3.22.4″][et_pb_accordion _builder_version=”3.22.4″ icon_color=”#02e5e6″][et_pb_accordion_item title=”WHAT DOES SECONDWRITE’S MALWARE DEEPVIEWTM DO AND WHO USES IT?” _builder_version=”3.22.4″ open=”on”]SecondWrite has developed an innovative automated malware analysis solution for detecting advanced malware including APTs, targeted attacks and zero-day evasions that defeat other solutions. Our dynamic analysis malware detector uses patented technology to find and evaluate hidden code paths that other malware detectors miss. Using advanced program analysis, neural networks, and our state-of-the-art patented technology, we automatically detect malicious code sequences, classifying malicious program behavior and features that consistently evade competitive technology.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT MAKES SECONDWRITE DIFFERENT FROM OTHER SANDBOXS?” _builder_version=”3.22.4″]Malware DeepViewTM eliminates blind spots prevalent in existing automated malware analysis solutions. Other automated malware solutions are only based on monitoring the interaction of malware with its “external” environment, primarily the operating system’s resources on the computer. In addition, such tools are specialized to certain known evasion types.
Malware DeepViewTM is based on deep introspection and complete code exploration of malware using founding team’s ten years of research background in deep analysis of software and malware, and our patented technologies. This enables the sandbox component of our product to detect malware based on internal code behavior and overcome any evasion type, including zero-day evasions that are unknown to us.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT IS THE INPUT AND OUTPUT OF YOUR MALWARE DETECTOR?” _builder_version=”3.22.4″]The input to Malware DeepViewTM is a file submitted by the customer or security partner. The output is a report, available in both JSON and HTML formats. The report contains a score indicating how likely the file is malicious, and several details about its behavior. The network files are also provided as output.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT INPUT FILE TYPES DOESMALWARE DEEPVIEWTM SUPPORT?” _builder_version=”3.22.4″]Currently the file types supported are:
• Windows executables (32-bit and 64-bit).
• Windows DLLs (32-bit and 64-bit)
• .NET executables (32-bit and 64-bit)
• .NET DLLs (32-bit and 64-bit)
• PDF
• MS Word (.DOC and .DOCX)
• Flash files
• MS Excel (XLS and XLSX)
• Archives (.zip, .rar, 7z, .iso, .tar, .gz,.bz2)
• ELF Executables (32-bit and 64-bit)
• Mach-O (32-bit and 64-bit)
• DMGs (32-bit and 64-bit)
Malware DeepViewTM currently supports Windows OS, Mac OS and Ubuntu. The support for other Operating System will be rolled out in next few months.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT DEPLOYMENTS ARE SUPPORTED?” _builder_version=”3.22.4″]Malware DeepViewTM is hosted on our cloud platform. Our cloud can be accessed via a web-portal or via APIs provided. Both mechanisms are easy to use. The cloud offers great ease of use with no installation needed and Tier 1 support by SecondWrite.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT FEATURES DOES THE WEB-PORTAL CONTAIN?” _builder_version=”3.22.4″]The web-portal can be used for several functions: users can get their account information, a summary of their submissions, links to their most recent submissions, ability to search submissions, and a web interface to submit files. It is user friendly and easy to use.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT DOES YOUR REPORT CONTAIN? ” _builder_version=”3.22.4″]Our report contains a wealth of information on the file’s static and dynamic behavior, including at least the following:
• A score indicating how confident we are that the file is malicious.
• File header information.
• List of suspicious behaviors found, including the severity level of each.
• A classification of the malware (e.g., ransomware, spyware, Trojan, adware, phishing etc.)
• The IP addresses the malware attempts to connect to.
• A world map indicating the countries in which the connected-to IP addresses reside.
• Process graph showing what processes this file creates or interacts with.
• Files it reads, writes to, moves, and deletes.
• PCAP files containing the network traffic generated by this file.
• OS calls made by each process, along with arguments.
• Yara rules matched.
• Registries that are read, written to, and deleted.
Unlike competitor tools that are specialized to certain known evasion types, our Malware DeepViewTM can overcome any evasion type, including zero-day evasions that are unknown to us.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT TYPES OF LICENSES ARE AVAILABLE? ” _builder_version=”3.22.4″]There are three license types for SecondWrite’s Malware DeepViewTM.
1. Basic license: The starting Basic Account allows users to submit up to 200 samples per day (Other Basic accounts allow for more submissions per day). Note there is NO API Access with this account type.
2. Enterprise license: The starting Enterprise Account allows users to submit up to 500 samples per day (Other Enterprise accounts allow for more submissions per day). NOTE the enterprise license does have API Access with this account type.
Please contact us at info@secondwrite.com to get more details about these licenses.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT IS THE DURATION OF A LICENSE?” _builder_version=”3.22.4″]Basic and enterprise license are valid for 1 year after purchase and can be renewed online. The default is set to auto-renew your subscription after 1 year please contact us at info@secondwrite.com to change this.
There are four Basic Malware DeepViewTM versions allowing users purchase submission levels of 200, 500, 1,000 or 2,000 samples per day.
The basic version allows users to have a complete submission history, PCAP download and access to technical support. NOTE: The basic version does NOT have API Access.
Please contact us at info@secondwrite.com for more details.
[/et_pb_accordion_item][et_pb_accordion_item title=”WHAT ADDITIONAL FEATURES DO I GET IN AN ENTERPRISE VERSION? ” _builder_version=”3.22.4″]In addition to the features available in basic version, the enterprise version allows users to access to a programmable API which allows automatic submission of samples to Malware DeepViewTM and enables automated workflows.
Also included is reports in JSON Format and training support. Finally enterprise customers can contact us via email to purchase paid subscriptions manually, or purchase subscriptions with a higher file quota than available.
Please contact us at info@secondwrite.com for more details.
[/et_pb_accordion_item][et_pb_accordion_item title=”CAN I UPGRADE MY PLAN PART WAY THROUGH MY LICENSE PERIOD? ” _builder_version=”3.22.4″]Yes, users on a paid plan can upgrade to a more expensive license during the 1 year period with a pro-rated coupon code.
Please contact us at support@secondwrite.com to obtain a pro-rated coupon code for checkout.
[/et_pb_accordion_item][et_pb_accordion_item title=”IS THERE ANY RESTRICTION ON HOW I CAN USE THE OUTPUT? ” _builder_version=”3.22.4″]As per EULA, users are only allowed to use the output of SecondWrite for their internal analysis and are not allowed to use it as OEM or part of their product. In you need to integrate SecondWrite as part of your product or services, please contact us for OEM licensing details.
[/et_pb_accordion_item][/et_pb_accordion][/et_pb_column][/et_pb_row][/et_pb_section]