IIMQL – The Query Language for Adversary Infrastructure (4/7)

by Robin DostPart 4 of 7 of building the Malwarebox EcosystemWebsite: https://iimql.malwarebox.euGitHub: https://github.com/MalwareboxEU/IIMQL In the previous part, I introduced IIM, the Infrastructure Intelligence Model. But once you have a structure, the next obvious question is: How do you search it? Because describing one chain is nice.Describing ten chains is useful.Describing a few thousand…