ANY.RUN introduced Threat Intelligence Lookup<\/a> in February 2024, followed by the YARA Search<\/a> in April 2024. This article will explore both services and their use cases. <\/p>\n\n\n\n Threat Intelligence Lookup<\/a> allows users to search through the database of sandbox tasks by examining specific details such as: <\/p>\n\n\n\n All of these are logged by the ANY.RUN sandbox<\/a>. <\/p>\n\n\n\n The service helps users find critical information like IOCs (Indicators of compromise), events, sandbox reports, and other data corresponding to the search query. <\/p>\n\n\n The main page of the Threat Intelligence<\/a> service provides a summary of the most common MITRE<\/a> techniques used, malware threat statistics, and popular Suricata rules<\/a> derived from submitted samples, offering valuable insight into current cyber threat trends.\u00a0<\/p>\n\n\n After navigating to the Lookup section<\/a> you’ll be able to submit your search query using over 40 different search parameters. <\/p>\n\n\n\n Explore all search parameters available in TI Lookup in the following article.<\/a> ANY.RUN also offers a comprehensive query guide for the TI Lookup once you’re on the platform.\u00a0<\/p>\n\n\n\n Let\u2019s now look into a few use cases with some of TI Lookup’s key search parameters.<\/p>\n\n\n\n\nHow Threat Intelligence Lookup Works<\/h2>\n\n\n\n
\n
![\"\"](\"\/cybersecurity-blog\/wp-content\/uploads\/2024\/10\/image1-1024x495.png\")
![\"\"](\"\/cybersecurity-blog\/wp-content\/uploads\/2024\/10\/image2-1024x600.png\")