ANY.RUN & Elastic Security: Bring Threat Intelligence into Detection and Investigation Workflows      

ANY.RUN announces an integration that ingests sandbox-validated threat intelligence feeds (IPs, domains, URLs and contextual sandbox reports) into Elastic Security to improve detection, triage, and investigation workflows. The document outlines benefits, use cases, and setup instructions for SOC and MSSP teams but does not describe any specific incident or provide technical analysis of threats.