AI assistant interprets a lookup request in natural language, helps select sandbox analyses of malware using a TTP<\/em><\/figcaption><\/figure>\n\n\n\nAI-assisted search is available directly in the query flow, allowing analysts to use natural language and move from question to results without manual query building. <\/p>\n\n\n\n
With this expanded access, SOC and MSSP teams can explore Threat Intelligence capabilities in their workflows and see how it affects core SOC processes for faster and more confident operations<\/strong>: <\/p>\n\n\n\n\n- Reduce triage time:<\/strong> Validate alerts against ANY.RUN\u2019s threat database to get immediate verdicts, full context, and access to related samples and activity. <\/li>\n<\/ul>\n\n\n\n
\n- Improve response accuracy:<\/strong> Pivot from a single indicator to connected infrastructure, artifacts, and behavior to understand how the attack unfolds and what else needs containment. <\/li>\n<\/ul>\n\n\n\n
\n- Run more effective threat hunts:<\/strong> Test hypotheses against live attack data, find related samples with YARA Search, and confirm relevance before expanding the hunt. <\/li>\n<\/ul>\n\n\n\n
\n- Build detections based on real attacks:<\/strong> Use discovered patterns and artifacts to create or refine detections aligned with current malware and phishing activity. <\/li>\n<\/ul>\n\n\n\n
This directly impacts key SOC metrics, including reduced time per investigation, lower escalation rates, and faster Mean Time to Respond. <\/p>\n\n\n\n\n
![\"\"](\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/04\/bigti_0-1024x540.png\")