KAMAS is a knowledge-assisted visualization system for behavior-based malware analysis. It supports malware analysts with visual analytics and knowledge externalization methods for the analysis process. In this screen KAMAS is used to explore 332 rules extracted from a cluster of 12 malware sample (12x Badtrans (Worm)).