On the detection side, our team added 78 new behavior signatures<\/strong>, 1,657 new Suricata rules<\/strong>, and 35 new YARA rules<\/strong>. We also released new Threat Intelligence Reports covering malware, loaders, RATs, backdoors, and supply-chain threats observed in recent submissions. <\/p>\n\n\n\n Here\u2019s a closer look at what\u2019s new. <\/p>\n\n\n\n In April, ANY.RUN expanded access to Threat Intelligence<\/a> capabilities, giving more teams a way to test threat context directly in their SOC workflows. <\/p>\n\n\n\n The key update: Free plan users<\/strong><\/a> now get 20 premium requests in TI Lookup and <\/strong>YARA Search<\/strong><\/a>.<\/strong> This gives security teams a practical way to check indicators, explore related sandbox sessions, and validate suspicious activity using real attack data from ANY.RUN\u2019s community. <\/p>\n\n\n\n Threat intelligence brings the most value when it helps teams make faster decisions during active investigations. Instead of stopping at one suspicious IP, domain, hash, or behavior, analysts can pivot to connected samples, infrastructure, artifacts, and attack context. <\/p>\n\n\n\n With 20 premium requests now included in the Free plan, SOC and MSSP teams can explore threat data across IOCs, IOBs, and IOAs linked to recent malware and phishing activity. <\/p>\n\n\n Teams can use this expanded access across key SOC workflows: <\/p>\n\n\n\nProduct Updates <\/h2>\n\n\n\n
More Threat Context with 20 Premium TI Requests<\/em> <\/h3>\n\n\n\n
![\"\"](\"https:\/\/any.run\/cybersecurity-blog\/wp-content\/uploads\/2026\/04\/bigti_0.png-1024x540.webp\")