Introduction

Spectra Detect uses a flexible cluster architecture that scales incrementally to support distributed or centralized file processing across physical and cloud environments. The cluster incrementally scales file processing capacity from 100K to 100M files per day by adding Worker nodes to the cluster.

Every Worker contains an instance of Spectra Core, a platform for automated static decomposition and analysis of files. Spectra Core can automatically unpack and extract information from more than 300 PE packer, archive, installation package, firmware image, document, and mobile application formats.

The extracted information includes metadata such as strings, format header details, function names, library dependencies, file segments and capabilities. This information is contained in the Worker analysis report (JSON file).

Note

The documentation for hosted appliances contains references to configuration options. These configuration options (and more) are available only to on-premises users.