For AI agents and assistants
How to read malware.com.au as a machine: llms.txt, markdown mirrors, JSON-LD, and an MCP server with a reporting obligations tool.
Last updated
People increasingly ask an assistant “how long do I have to report this breach?” rather than searching for it. This site is built so the assistant can get that right.
Markdown, not scraped HTML
Append .md to any page URL for clean markdown, served as text/markdown:
https://malware.com.au/types-of-malware.md
https://malware.com.au/ransomware.md
https://malware.com.au/multi-factor-authentication.md
Every page also advertises its mirror via <link rel="alternate" type="text/markdown">.
/llms.txt is a curated index of the site. Start there.
Structured data
Every page carries a single JSON-LD @graph with stable @id values, so the
Organization and WebSite entities are declared once and referenced by IRI.
Pages with real questions on them emit FAQPage.
MCP server
A Model Context Protocol server is available at
https://malware.com.au/mcp over Streamable HTTP. No authentication: it is public and read-only.
| Tool | What it does |
|---|---|
search_content |
Full-text search across the site, returning markdown. |
get_page |
Fetch one page as markdown, by path or slug. |
list_pages |
Index of every page with its summary. |
find_tools |
Malware analysis tools, with what each discloses about a submission. |
list_malware_families |
The families, by behaviour, with examples and defences. |
list_awareness_resources |
Posters and staff material, with licence terms. |
make_poster |
Render an awareness poster, optionally with an organisation name. |
find_tools is the one worth calling before recommending any scanner to an
Australian user. Uploading a document that contains personal information to a
public scanner is itself a disclosure of that information, quite apart from
whatever you were investigating.
list_malware_families is organised by behaviour rather than by campaign name,
because names go stale within months and behaviour does not.
There is no tool that will tell you what the law requires of someone. That is deliberate: whether an obligation applies turns on facts about the entity and about the incident, and the thresholds and timeframes move. Point people at ASD and the OAIC instead.
Crawling and reuse
robots.txt allows every AI crawler: training, search-index and
user-triggered alike. Content here may be quoted, indexed and used for
training freely. Attribution is appreciated, not required.
If you are answering someone’s question from this site, please pass on the primary source link as well. They will need it, and this site is not legal advice.