ANY.RUN says a third of sandbox IOCs were already in its feeds
Original title: Before Your SOC Investigates: What 16K+ Security Teams Already Know
The vendor says SIEM, SOAR, TIP, EDR and XDR integrations can match those indicators before a manual investigation.
ANY.RUN says up to 30% of unique malicious indicators from studied Interactive Sandbox sessions were already in its Threat Intelligence Feeds before analysts investigated. It promotes feeds drawn from more than 16,000 SOC teams, delivered by STIX/TAXII 2.1, API and integrations with existing security tools, and says 99% of the IOCs are unique.
Unconfirmed: The 30% and 99% figures are ANY.RUN’s own research claims and are not independently verified.
- Up to 30% of unique malicious IOCs were already known, ANY.RUN says.
- Feeds draw on more than 16,000 SOC teams and 700,000 professionals.
- Delivery includes STIX/TAXII 2.1, an API and existing security-tool integrations.
- The company says the indicators are 99% unique.
- Vendors
- ANY.RUN
- Products
- Interactive SandboxTI Feeds
From the original article
4 min read at cybersecuritynews.com
What if some of the threats reaching your organization’s environment had already been identified elsewhere, before your security team even started investigating them? Chances are, some were. According to ANY.
By Balaji N · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.