Data coverage
A dataset intended to support research on machine learning techniques for detecting malware. It includes metadata and EMBER-v2 features for approximately 10 million benign and 10 million malicious Portable Executable files, with disarmed but otherwise complete files for all malware samples. All samples are labeled using Sophos in-house labeling methods, have features extracted using the EMBER-v2 feature set, well as metadata obtained via the pefile python library, detection counts obtained via ReversingLabs telemetry, and additional behavioral tags that indicate the rough behavior of the samples.
Access & permitted use
Review the publisher’s documentation for availability, eligibility and permitted uses, including commercial analysis, model training and redistribution.
See the Terms of Use
Need help sourcing data?
Tell us your required fields, population, geography and time period. We can review suitable sources and licensing options.
Request sourcing help