T1000 XG
T1000 XG is the Advanced Analysis appliance. It supports TCA-0101 (File Reputation), TCA-0103 (XREF), TCA-0104 (RLDATA), and the XG-CFS forensic sampling service.
XG shares the same core data model as T1000 R1, but exposes significantly more sample metadata through XREF and RLDATA.
When XG is integrated with Spectra Analyze or Spectra Detect, RCA2 data becomes available to that product through the integration. RCA2 is not a directly callable endpoint.
Capabilities
- Multi-scanner detections: XREF (TCA-0103) returns current multi-scanner detection results, but historical scan records are not available on the appliance and are returned as
null(see general limitations). - Relationships: XREF (TCA-0103) can also extract file relationships between a sample and its sources (Sample-Summary-Sources).
- Hashes: RLDATA (TCA-0104) allows XG to return MD5 and SHA256 in addition to SHA1, unlike R1.
File reputation (TCA-0101)
The File Reputation (Malware Presence) service provides information about the malware status of requested samples.
Historic multi-AV scan records (TCA-0103)
The Historic Multi-AV Scan Records service provides multi-AV scan reports for a given sample.
File analysis (TCA-0104)
The File Analysis service provides analysis data on requested hashes.
Cyber Forensic Service (XG CFS)
XG CFS provides all available cyber forensic Spectra Intelligence XG metadata for the requested sample(s) on the T1000 XG appliance.