Hashir Asad: information security professional and researcher focused on identity & access management and threat detection & response. Research, writeups and projects.https://hashir-ruddy.vercel.appenhttps://hashir-ruddy.vercel.app/research/llm-assisted-forensic-timeline-analysishttps://hashir-ruddy.vercel.app/research/llm-assisted-forensic-timeline-analysisCompares reading a forensic file-activity timeline from The Sleuth Kit on its own with having an open-source LLM, Falcon-7B-Instruct, interpret it. Tested against simulated malware activity, the model flagged files being suspiciously modified and encrypted, along with a suspicious new .exe and .txt file, as possible ransomware, making the threat easier to understand.Thu, 01 Aug 2024 00:00:00 GMTresearchDFIRLLMRansomwareThe Sleuth KitFalcon-7BPython