Hatching Triage to enhance Sekoia Cyber Threat Intelligence

Sekoia outlines how it integrated Hatching Triage sandbox results into its CTI and SOAR pipelines to automatically extract, normalize, enrich and ingest malware-derived IoCs (including C2 servers and ports) into their STIX-based knowledge base; the integration produced ~9,000 indicators over a month and aided detections in Sekoia XDR (notably Agent Tesla), improving detection and investigation capabilities.