The ANY.RUN Action enables users to submit a collection of URLs and FQDNs to ANY.RUN for sandbox analysis. The results of this analysis are later utilized by the ANY.RUN CDF to collect and enrich contextual information derived from the executed analysis.

The integration provides the following action:

• ANY.RUN Submit for Analysis - submits a collection of URL and FQDN type indicators to ANY.RUN sandbox for analysis.

The integration is compatible with the following indicator types:

• FQDN
• URL

The integration enriches the following indicator types:

• FQDN
• URL

Note: This action is intended for use with ThreatQ TDR Orchestrator (TQO). An active TQO license is required for this feature