Phishing Response Protocol: 3 Essential SOC Steps Powered by ANY.RUN’s Latest Product Updates 

ANY.RUN’s report demonstrates faster phishing response using a reproduced EvilTokens device-code phishing campaign, highlighting new capabilities (SSL decryption without MITM, in-browser data inspection, AI Tier‑1 reports, and Threat Intelligence Connections) that expose the full attack chain, extract IOCs (e.g., /api/device/start, /api/device/status/), and enable faster triage, escalation, and proactive hunting across SOC workflows.