ANY.RUN TI Lookup

ANY.RUN's Threat Intelligence Lookup (TI Lookup) is a service that allows you to browse IOCs and related threat data to simplify and enrich cyberattack investigations.

This connector enables OpenCTI users to browse various types of IOCs, from IPs and domains to URLs and hashes, directly within OpenCTI. It returns related threat data to provide actionable insights for incident response, detection rule creation, and playbook updates.

Key benefits: • Early Threat Detection: Correlate IOCs to identify incidents before they escalate • Proactive Defense Enrichment: Collect indicators from attacks on other companies to update detection systems • Reduced MTTR and Increased Detection Rate: Access rich threat context to enable fast, informed decisions