Google has expanded the capabilities of VirusTotal Code Insight, a new artificial intelligence (AI)-based code analysis tool. Code Insight was initially launched with support for analyzing PowerShell files, but Google has now added several scripting languages, including Batch, Command Prompt, Shell, VBScript, AutoHotkey, and Python.
The company has also doubled the maximum file size limit to make it easier to analyze larger files. The AI model has also been improved to provide clearer and more specific high-level explanations of code behavior.
Code Insight leverages the Sec-PaLM large language model, which has been fine-tuned for security use cases. The tool analyzes potentially harmful files to describe their behavior, making it easier to identify actual threats.
The revamped user interface now showcases only the start of the report by default, allowing users to expand the description if needed. The tool is still in its early stages of development, and Google plans to expand its capabilities by enabling the analysis of binary and executable files, incorporating contextual information beyond the code itself, and supporting additional file types and sizes.
VirusTotal is a web-based malware-scanning platform owned by Google’s Chronicle security subsidiary. The platform helps users scan suspicious files and URLs for malicious content using more than 70 antivirus scanners and domain blocklisting services.
VirusTotal Code Insight is a valuable addition to VirusTotal’s capabilities, enabling users to more easily identify and understand potential threats in code files. The expansion of Code Insight’s capabilities to additional scripting languages and larger file sizes will be particularly helpful to security professionals who need to analyze large volumes of code quickly and accurately.
The increasing use of AI in cybersecurity has helped organizations detect and respond to threats more quickly and efficiently. AI-based tools like VirusTotal Code Insight are designed to help organizations automate the process of analyzing code and identifying potential threats.
The expansion of Code Insight’s capabilities is a welcome development for security professionals who are looking for new and more effective ways to protect their organizations from cyber threats.
