KAMAS is a knowledge-assisted visualization system for behavior-based malware analysis. It supports malware analysts with visual analytics and knowledge externalization methods for the analysis process. In this screen KAMAS is used to explore 748 rules extracted from a cluster of 15 malware sample (13x Fizzer (Worm), 2x IRCBot (Bot)).