BSides Canberra 2026

Azul: How to build “good” malware analysis platforms
2026-09-24 , Main Track

Alternatively: Azul - The Talk, or Azul - It’s Blue!

Azul is ASD’s ACSC’s in-house malware analysis and clustering platform, designed to deal with the
fast-paced and complex threat landscape that malware reverse engineers and incident responders
face. This talk will describe why we have built Azul, what it does, and a technical deep-dive into how to build systems that meets both the needs of highly technical users and robustness required for large
organisations.

The talk will include live demos on the product’s use in real analysis situations, reflections on previous
internal iterations of the product and anecdotes on what not to do when building products like this. The talk will answer why organisations might have a need for automated malware processing products like Azul and where to find our open-source release.

James is an automation engineer at ASD's ACSC, working on automated malware analysis platforms to improve the speed and accuracy of incident response activities.