False Negatives Are a New SOC Headache. Here’s the Fast Way to Fix It 

This report argues that static scanning leads to costly false negatives against interaction-gated phishing and multi-stage malware, and recommends an interactive sandbox approach (ANY.RUN) that executes suspicious links/files in real environments, automates user-like interactions (e.g., redirects, CAPTCHAs, QR extraction), and integrates verdicts and IOCs into existing email security, SIEM, and SOAR workflows to reduce workload and improve detection fidelity.