TechBrief: Identifying Malware Distribution Relationships
Written while working for CompuCom Systems in May 2011. This paper documents a method for tracking malware distribution servers using the HTTP Header E-Tag field.
Reference
Cave, R. (2011). Techbrief: identifying malware distribution relationships. Retrieved May 26, 2011 from: http://www.compucom.com/PublishingImages/new/TechBrief-Identifying%20Malware%20Distribution%20Relationships-CompuCom.pdf