ANY.RUN Introduces Related Threat Context to Help SOC Teams Cut Triage Time

DUBAI, DUBAI, UNITED ARAB EMIRATES, October 21, 2026 /EINPresswire.com/ — ANY.RUN, a leading provider of interactive malware analysis and threat intelligence solutions, has introduced Related Threat Context for ANY.RUN Enterprise clients.

The new capability connects indicators found during Interactive Sandbox analysis with previous team investigations, related industry activity, and ANY.RUN Threat Intelligence, helping SOC and MSSP teams uncover useful context and make faster triage decisions.

𝐁𝐫𝐢𝐧𝐠𝐢𝐧𝐠 𝐓𝐡𝐫𝐞𝐚𝐭 𝐂𝐨𝐧𝐭𝐞𝐱𝐭 𝐢𝐧𝐭𝐨 𝐓𝐫𝐢𝐚𝐠𝐞

Tier 1 analysts often need to decide whether to close, investigate, or escalate a case before they know what other intelligence exists around an IOC. Related Threat Context surfaces relevant connections directly in the Sandbox, helping SOCs and MSSPs see what deserves attention and where to investigate next.

The capability provides:

· 𝗧𝗲𝗮𝗺 𝗰𝗼𝗻𝘁𝗲𝘅𝘁: Connect IOCs to previous team analyses to reuse findings and avoid duplicate investigations.

· 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝘆 𝗰𝗼𝗻𝘁𝗲𝘅𝘁: Show whether an IOC has appeared in related activity within the organization’s industry, providing an additional prioritization signal. Industry data is anonymized and available to eligible internal SOC teams.

· 𝗔𝗡𝗬.𝗥𝗨𝗡 𝗧𝗵𝗿𝗲𝗮𝘁 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲: Identify when additional intelligence is available and provide a direct path to Threat Intelligence Lookup for deeper investigation.

𝐒𝐢𝐠𝐧𝐚𝐥𝐬 𝐟𝐨𝐫 𝐅𝐚𝐬𝐭𝐞𝐫 𝐏𝐫𝐢𝐨𝐫𝐢𝐭𝐢𝐳𝐚𝐭𝐢𝐨𝐧

Related Threat Context also provides 𝗡𝗲𝘃𝗲𝗿 𝗦𝗲𝗲𝗻 𝗕𝗲𝗳𝗼𝗿𝗲 𝗮𝗻𝗱 𝗖𝗼𝗺𝗺𝗼𝗻𝗹𝘆 𝗦𝗲𝗲𝗻 signals to help analysts allocate attention. A previously unseen IOC may warrant closer investigation, while a commonly observed indicator can help security teams deprioritize generic or frequently encountered activity.

These signals are not verdicts. They give triage additional context to evaluate alongside sandbox behavior, verdicts, and other evidence.

𝐁𝐮𝐬𝐢𝐧𝐞𝐬𝐬 𝐕𝐚𝐥𝐮𝐞 𝐟𝐨𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐬

By making relevant context visible at the point of triage, Related Threat Context helps SOCs and MSSPs:

· Reduce time-to-triage and reach investigation decisions faster

· Prioritize analyst attention toward findings that warrant deeper investigation

· Reduce duplicate work by making previous team investigations easier to discover

· Improve escalations by giving Tier 2 more actionable context from the start

· Strengthen threat visibility by connecting isolated IOCs to broader activity

For SOC leaders and CISOs, this creates a more connected security workflow. Teams can make better decisions while using analyst time more effectively.

Read the full article to see Related Threat Context in action.

𝐀𝐛𝐨𝐮𝐭 𝐀𝐍𝐘.𝐑𝐔𝐍

Trusted by more than 700,000 cybersecurity professionals and 16,000 organizations worldwide, ANY.RUN helps security teams investigate threats faster and make more informed decisions. The company’s solutions combine an Interactive Sandbox for real-time malware analysis with Threat Intelligence capablities that provide actionable context for detection, investigation, and response.

The ANY.RUN team
ANYRUN FZCO
+1 657-366-5050
Visit us on social media:
LinkedIn
YouTube
X

Media gallery