In reply to Alberta.

Thank you for your comments - glad to hear this brings some inspiration!
Please feel free to check other blogs on the platform. In particular, part 2 of this blogs may be of interest:
https://blogs.cisco.com/security/defeating-polymorphic-malware-with-cognitive-intelligence-part-2-command-line-argument-clustering

Thank you and all the best, Evgeny