Secure Malware Analytics

Cisco Secure Malware Analytics (formerly Cisco Threat Grid) combines advanced sandboxing with threat intelligence into a powerful solution to protect organizations from malware.

Cisco Secure Malware Analytics (formerly Cisco Threat Grid) combines advanced sandboxing with threat intelligence into a powerful solution to protect organizations from malware. Secure Malware Analytics is an advanced and automated malware analysis and malware threat intelligence platform in which suspicious files or web destinations can be detonated without impacting the user environment.

When integrated, Secure Malware Analytics is a reference module that provides licensed users the ability to pivot into the Secure Malware Analytics Cloud portal to gather additional intelligence about file hashes, IPs, domains, and URLs. It also provides a number of dashboard tiles for quick insight into current Secure Malware Analytics sample submission data.

Automation

Automatic target creation for Cisco XDR automation

Refer

Provides links to additional resources for an observable

Tiles

Provides tiles for the Cisco XDR dashboard

Observe

Provides sightings for an observable

Deliberate

Provides dispositions for observables

North America

Europe

Asia-Pacific, Japan & China

These are workflows that you can install in Cisco XDR automation and use with this integration. These are different from built-in workflows which are built into Cisco XDR by default for all customers.

Community

This scheduled workflow executes a search query in Cisco Secure Malware Analytics for new private samples submitted and convinced as malicious.

Community

This Cisco XDR workflow automates threat analysis from incoming emails.