Speaker: Xavier Mertens Every day, defenders face roughly half a million new malware samples. Nobody has the analysts nor the budget to open them all, because reverse-engineering everything (by hand or by tokens) costs a fortune. The only way to survive the flood is to look at less: fast, cheap triage that decides what a human ever sees.

This talk is a practical, occasionally irreverent tour of how AI makes that filter work and is helpful once a sample makes it through the gate.

We start with the problem in numbers: daily sample volume, why signatures and manual review can't keep up, and the two currencies you can't spend on everything. Then we get into the machinery of triage: classifying malware and its family, clustering unknown samples to expose brand-new campaigns, matc ...