ANY.RUN cites 76% faster phishing triage at a US healthcare MSSP
Original title: 76% Faster Triage: How US SOCs Increase ROI Through Visibility and Automation
The vendor says Tier 1 closure rose from 20% to 70%, while a cited study found 42% of alerts uninvestigated.
ANY.RUN’s Cybersecurity Awareness Month post argues that behavioral visibility and automation raise SOC return on existing staff. It cites a healthcare MSSP that cut phishing investigation from 30–40 minutes to 4–7 minutes, a 76% reduction, and raised Tier 1 closures from 20% to 70%. The piece also quotes a 2026 Microsoft and Omdia study on uninvestigated alerts and false positives, and walks through a QR-code Microsoft 365 credential-phishing demo in its sandbox.
Unconfirmed: The 76% triage gain and Tier 1 closure figures are a single MSSP case described by ANY.RUN.
- ANY.RUN says median sandbox threat detection time is 14 seconds.
- It claims AI recommendations can cut Tier 1-to-Tier 2 escalations by up to 30%.
- About 30% of unique malicious IOCs in studied sessions were already in its feeds.
- The cited study says 46% of respondents see more than half of alerts as false positives.
- The demo email’s QR code leads to a Microsoft 365 credential-harvesting page.
- Vendors
- ANY.RUN
- Products
- ANY.RUN Interactive Sandbox
- Countries
- United States
From the original article
7 min read at any.runOctober marks Cybersecurity Awareness Month, a timely opportunity to look at how American organizations can strengthen their security operations. Among the biggest challenges SOC teams face is making sure they not only detect and investigate threats, but doing so quickly enough to make the right security decisions without overwhelming analysts or increasing operational costs. In […]
any.run
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.