Detection & Response Enablement
Aperçu
Hatching Triage connector detonates files and URLs in a malware sandbox, extracting malware families, C2 infrastructure, network indicators, and MITRE ATT&CK TTPs.
Hatching Triage is a malware analysis sandbox that automatically analyzes malicious files and URLs, extracting configuration data, network indicators, and behavioral information.
This connector submits files (Artifacts) and URLs to Hatching Triage for dynamic analysis and enriches OpenCTI with the results including:
- Malware family identification
- C2 server addresses and URLs
- Network indicators (domains, IPs)
- Extracted credentials
- MITRE ATT&CK TTPs
- Dropped files and configurations
- Botnet and campaign information
Informations de base
Connecteurs
6.8.13
6.8.13
1