@wakame@tess We are trying for the past years to get access for DFIR without any success. There are also some hash databases but as far as I know it’s a business which is basically not willing to share hashes for detection to be used by incident responders.