Dynamic Analysis Results

Each dynamic analysis integration adds its own section to the Sample Details page. Depending on the service, you may find:

• Screenshots from the sandbox execution, with a gallery view and slideshow option.

• Dropped files and other artifacts (such as PCAPs and memory strings), available for download within the service's retention period.

• Behavioral and network indicators of compromise (IoCs), including URIs, IP addresses, and domains seen during execution.

• History of past analyses for the same sample, with the ability to download reports for each run. Each entry displays the configuration used for that analysis, including platform, locale, and geolocation, with a tooltip showing additional details such as installed software.

• Interactive report tabs showing processes, network activity, file system changes, registry modifications, and other runtime behavior.

• Links to full reports in the service's native interface.

• Export options to generate HTML or PDF reports (where supported).

Dynamic analysis services must be configured by the appliance administrator. For more information, see Analysis services.