Views:

Submit samples for analysis in a secure virtual environment.

Sandbox Analysis manages and analyzes objects submitted to the sandbox by integrated products and users. The following table outlines the available actions:
Action
Description
Select Submit Object to manually submit an object for analysis in the sandbox.
Select Manage usage to view feature options and credit usage.
Create a High-Risk Submissions report
Select Manage Reports → High-Risk Submissions to create a High-Risk Submissions report.
Filter submitted object data
Use the search and filters to locate specific submitted object data.
Partial matching applies to Object, Threat type, and Threat name. Exact matching applies to SHA-1 hash value.
Note
Note
For URL submissions, the Sandbox Analysis list displays both the normalized URL (the URL that the sandbox analyzed) and the original URL (the URL you submitted). The toolbar search matches against either form.
Refresh the table
Select refresh=5bd75452-c2fb-43ed-90e6-7b552fdc5dd2.png to refresh data displayed in the table.
Select any object name to display the object profile.
Take additional actions
Select the options=ddb0b67f-0654-4aa5-8bc7-48ec554c5448.png to select additional actions on the submitted object.
Important
Important
Downloading and re-analyzing file objects requires granting TrendAI™ permission to save submitted files.
  • sandbox_analysis_threat_connect=GUID-5F89C25F-5693-4A7F-9844-10B64A9672A8=1=en-us=Low.png View in Threat Connect: Displays information about the object on Threat Connect
  • add_to_intelligence_reports=GUID-20230222174444.png Add to Intelligence Reports: Adds the object to Intelligence Reports and runs an auto sweep
  • investigation_package=224e6f30-a8c9-45e3-b664-8be5ed1e05da.png Download investigation package : Downloads the investigation package of submitted objects with high, medium, and low risk levels
  • download_file_obj=bdb00930-9206-4d5b-baf0-2b4cb39043bf.png Download file object: Downloads the submitted file object to your computer
    WARNING
    WARNING
    Downloading suspicious samples may potentially harm your endpoint. Ensure that you take the necessary precautions before continuing.
  • re-analyze=7d0b0a7b-0fa8-46a9-80a2-8b23a5d2b4c8.png Re-analyze: Submits the file or URL back to the Virtual Analyzer for further analysis.
    Important
    Important
    Re-analysis of objects counts toward credit usage.
  • trash_icon=GUID-47cf6867-6315-438e-8670-86ff36f22a28.png Delete submission: Deletes the previous analysis results and any associated files from Sandbox Analysis.
Tip
Tip
View in Threat Connect, Add to Intelligence Reports, Download investigation package, and Re-analyze are not available for AI skill submissions.