ANY.RUN Feed
概要
ANY.RUN Feed connector imports fresh network-based IOCs (IPs, domains, URLs) extracted from real-time sandbox analyses, with rich metadata and minimal false positives.
ANY.RUN's Threat Intelligence Feeds (TI Feeds) is a continuously updated source of fresh network-based Indicators of Compromise (IOCs): IPs, domains, and URLs. The IOCs are extracted from real-time analyses done by experts from 15,000 companies in ANY.RUN's Interactive Sandbox.
This connector provides OpenCTI users with automated access to uniquely sourced and accurate indicators of compromise.
Key benefits: • Expanded Coverage: Exclusive IOCs from Memory Dumps, Suricata IDS, in-browser data, and internal threat categorization systems • Reduced Workload: Pre-processed indicators with minimum false positives, ready for analysis or investigation • Informed Response: Rich metadata providing context for in-depth threat investigations and faster response