CHOOSESecurity & safety
Jev for SOC Command-Line Behavior Tagging
AFTERIMAGE@afterimagesec
This project tests Jev's capability to tag command-line behaviors relevant to Security Operations Centers (SOC), using a Certutil command to identify file download actions.
Testing @typesafeai's Jev for SOC command-line behavior tagging.
Used a Certutil command as the state and defined the possible behaviors. The API returned file_download.
Next: benign and ambiguous examples to test where the classification holds up. x.com/0xAfterimage/status/2100835739000865