ANY.RUN TI Lookup

TI Lookup is a searchable database of IOCs, IOAs, IOBs, and events for threat hunting and a service for browsing malicious files by their content.

Data Enrichment & Threat Intelligence · ANY.RUN

Configuration parameters

  • credentials — Username (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • integrationReliability — Source Reliability

Commands (5)

  • anyrun-get-intelligence

    Perform threat intelligence using specified IOC. Attaches a JSON summary to WarRoom.

  • domain

    Check Domain reputation (when information is available, returns a JSON with details).

  • file

    Check File reputation (when information is available, returns a JSON with details).

  • ip

    Check IP reputation (when information is available, returns a JSON with details).

  • url

    Check URL reputation (when information is available, returns a JSON with details).