From Reactive to Proactive: 5 Steps to SOC Maturity with Threat Intelligence 

ANY.RUN presents its Threat Intelligence offering as an operational layer for SOCs that links indicators to behavioral context and TTPs, enabling faster triage, automated feeds into SIEM/SOAR/EDR, YARA-based detection creation, and periodic analyst-curated reports; the paper emphasizes live attack-derived data and operational integration rather than reporting any specific security incident.