Skip to main content
Version: Spectra Analyze 9.8.1

Analysis services

Overview

Spectra Analyze supports optional integration with multiple first-party and third-party static and dynamic analysis services. Through these integrations, samples can be automatically submitted for dynamic analysis or reanalyzed on demand using any of the supported services.

All integrations work with samples submitted through the graphical user interface, as well as with those submitted via the Submissions API. Analysis results are organized by analysis type in the navigation bar on the left of the Sample Details Page.

First-party integrations are:

Third-party integrations are always used for dynamic analysis, and they are:

Integrations configuration

Analysis services must be configured on the Administration > Integrations & Connectors > Integrations page by an administrator. For more information, see Integrations.

Notes on configuration options

Submitting distinct files

Some analysis services have the option to submit only distinct files; however, it is disabled by default.

Administrators can enable this option to allow submitting only distinct files to an analysis service. When this option is enabled, if a file has already been submitted to Spectra Analyze and analyzed, it is not sent for reanalysis when it is submitted again. This option applies to files submitted using the GUI and the API. It does not affect the reanalysis feature - you can still submit files for reanalysis with any of the integrations even if the files have already been analyzed.

Queue limits and behavior

Some analysis services have queue limit for how many submissions can be simultaneously queued for analysis. Samples are considered queued if they are waiting for analysis or, in some cases, if they are in a processing state. If the queue is full, the appliance attempts to resubmit a sample up to five times, with a delay of 20 seconds between each attempt, before timing out. If it fails to resubmit the sample, that sample is removed from the queue.