Release Notes: Workflow Improvements, MISP Integration & 2,000+ New Detections 

ANY.RUN’s January updates introduce a native MISP integration that automates sending suspicious files/URLs to the sandbox and returns verdicts, risk assessments, extracted IOCs, ATT&CK mappings, and reports directly into MISP to speed triage and response, paired with 158 new behavior signatures, 4 YARA rules, and 1,897 Suricata rules covering ransomware, loaders, phishing infrastructure, backdoor C2, and stealer traffic; complemented by STIX/TAXII threat intelligence feeds, the release emphasizes reduced MTTR, stronger SLA performance, and faster investigations without extra headcount or tool switching.