Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)

The author used the Gemma4 LLM to analyze high-volume hashes observed by a Cowrie sensor and compared results against VirusTotal and CyberGordon; the LLM concluded repeated downloads indicate likely compromise with payloads consistent with botnet/loaders, backdoors/keyloggers, and credential-stealers. The report recommends immediate containment of affected hosts, improved sensor logging and egress filtering, enterprise-wide threat hunting for the top hashes, and re-querying threat intelligence sources for better IoC validation.