AssemblyLine
Enrichment & Analysis
Malware Analysis And Sandbox
概要
Sandbox-analysis enrichment for StixFile / Artifact observables backed by AssemblyLine 4.
Enrich OpenCTI Artifacts and StixFiles by submitting them to an AssemblyLine 4 deployment for sandbox analysis. AssemblyLine results are pushed back as a Malware-Analysis SDO, malicious indicators (domains, IPs, URLs), Malware SDOs for attributed families, MITRE ATT&CK Attack Patterns observed at runtime, a Note summarising the verdict, and an external reference to the AssemblyLine submission.
基本情報
コネクター
Internal enrichment
7.260527.0
0