The MetaDefender Sandbox Platform v1.8.1 release adds several new features and enhancements to help security operations centers (SOC) and incident response teams improve the efficiency of their analysis. Here are some of the highlights:
- Improved overviews of manual searches conducted by SOC teams and threat intelligence engineers that serve as a single source of truth
- Improved emulation speed and accuracy
- Improved YARA rules and threat indicators for better detection of steganographic attacks, malicious RTF files, and installers, among others
These improvements enable efficient malware analysis. SOC teams can easily investigate new and targeted threats to gain insights about potential malware in files and phishing.
Let’s take a closer look at MetaDefender Sandbox sandbox’s new capabilities and improvements.
Single Source of Truth Reputation API Endpoint
As a single and reliable source of truth, MetaDefender Sandbox’s Reputation API endpoint provides timely insights into malware and phishing threats. With the Reputation Endpoint, you can submit malware samples via the API to respond to advanced threats and increase SOC effectiveness.
MetaDefender Sandbox ingests a variety of data sources— machine-learning threat intelligence similarity searches, historical reports, and MetaDefender cloud reputation data—to provide accurate and granular reputation reports to calculate a verdict. It is the first API endpoint that should be called before you scan a file and quickly generates a summary card for any search performed for a hash, URL, IP address, or domain.
Key Features:
- Deep Structure Analysis (DSA)
- Adaptive Threat Analysis
- Threat Detection and Classification
- Threat Intelligence and Integration
See full MetaDefender Sandbox Engine Features.
Final Thoughts
The new features and enhancements introduced in Filescan v1.8.1 emphasize our dedication to providing SOC teams with the tools that make their jobs more accessible and more effective. We simplify increasingly complex security processes while continuing to create innovative tools that provide security analysts with a more efficient and effective experience.
Try MetaDefender Sandbox enterprise today or get in touch with our experts to learn more.
