ANY.RUN TI Lookup

TI Lookup is a searchable database of IOCs, IOAs, IOBs, and events for threat hunting and a service for browsing malicious files by their content.

Category

Data Enrichment & Threat Intelligence

Pack

ANYRUN

Configuration parameters

• credentials — Username (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• integrationReliability — Source Reliability

Commands (5)

• anyrun-get-intelligence — Perform threat intelligence using specified IOC. Attaches a JSON summary to WarRoom.
• domain — Check Domain reputation (when information is available, returns a JSON with details).
• file — Check File reputation (when information is available, returns a JSON with details).
• ip — Check IP reputation (when information is available, returns a JSON with details).
• url — Check URL reputation (when information is available, returns a JSON with details).