Threat hunting is a critical security function in 2022. CrowdStrike has developed a new, open-source tool that is a valuable addition to the arsenal of threat hunters. Sandbox Scryer helps organize and express the plethora of sandbox behavioral data so analysts can better understand and respond to attacks. You can read more about it on the CrowdStrike blog: https://www.crowdstrike.com/blog/sandbox-scryer-free-threat-hunting-tool/
Would you like to add Sandbox Scryer to your threat hunting toolbox? What are some pain points with your current data expression/analysis? Let us know in the comments, or feel free to DM me with any questions!