GORILLE is a software suite from Cyber-Detect for detecting and characterising malware, including unknown variants. The suite has four products: GORILLE Server returns a verdict and malware family for each file and can be called through a REST API from EDR, XDR, SIEM or SOAR tools; GORILLE Expert disassembles executables for reverse engineering; GORILLE Patrol searches an organisation's own IT estate for dormant threats; GORILLE On-Demand delivers a report prepared by experts. The technology stems from research at the LORIA laboratory.
Cyber-Detect is a French company headquartered in Nancy; no owner or parent company is named. According to the vendor, the SaaS version of GORILLE Server runs on a platform in France, and with an on-premises installation files stay within your own infrastructure. The other products are available on-premises or as a service. For a European organisation this matters because suspicious files need not be processed outside its own or the French environment.