Threat KB
Defensive malware triage notes for public threat research and SOC analyst training.
Knowledge Base Scope
ThreatRecon.io Threat KB pages are educational and defensive summaries for static triage, detection engineering, and analyst workflow support.
The analyzer does not attribute submitted artifacts to families or actors. Treat these notes as context for human review.
Starter Writeups
Each starter writeup includes behavior notes, MITRE ATT&CK mapping, IOC placeholders, detection opportunities, and defensive recommendations.