A few thoughts about static “IOC-less” malware detection

I imagine there are managed service IT companies out there sitting on gold mines worth of data that could be used this way.