2026-09-22 19:35 UTC
My notes from "Teaching Al to Analyze Malware: How to Encode Practitioner Expertise into an MCP Server" by Lenny Zeltser at #blueteamcon 🧵 (1/n)
Replies (1)
-
@PwnieFan@infosec.exchange 2026-09-22 19:36
The analysis process includes four components. The analyst frames questions and validates findings. The AI agent executes the investigation. The MCP server encodes practitioner knowledge. The toolkit is a disposable REMnux VM. "Teaching Al to Analyze Malware: How to Encode Practitioner Expertise into an MCP Server" by Lenny Zeltser at #blueteamcon (2/n)