Hatching Triage Sandbox
自動配備
Filigranの提供による
Detection & Response Enablement
概要
Hatching Triage connector detonates files and URLs in a malware sandbox, extracting malware families, C2 infrastructure, network indicators, and MITRE ATT&CK TTPs.
Hatching Triage is a malware analysis sandbox that automatically analyzes malicious files and URLs, extracting configuration data, network indicators, and behavioral information.
This connector submits files (Artifacts) and URLs to Hatching Triage for dynamic analysis and enriches OpenCTI with the results including:
- Malware family identification
- C2 server addresses and URLs
- Network indicators (domains, IPs)
- Extracted credentials
- MITRE ATT&CK TTPs
- Dropped files and configurations
- Botnet and campaign information