Hatching Triage

What Hatching Triage is

Hatching Triage is a cloud-based malware sandbox for automated analysis of suspicious files and URLs. It supports analysis environments for Windows 7 and 10, Linux, Android, and macOS, and handles more than 100 file types and archives. After unpacking and static analysis, it selects a dynamic analysis environment. Users can monitor file detonation live and take control of the analysis virtual machine. Reports highlight relevant findings, including configurations extracted for a growing number of malware families. Profiles save settings such as timeout and internet configuration, and can choose a specific custom virtual machine. A REST API provides access to analysis data and workflow automation; Hatching also documents a Cortex XSOAR integration for sample submission, result retrieval, and account and profile tasks. Individual users and researchers can use the public cloud for free. Hatching offers a private cloud demo environment on request, and says Triage can scale to 500,000 analyses per day. Its privacy policy says data is stored on servers in the Netherlands and personal data is encrypted. Active-account data is retained indefinitely; after deletion, analysis submissions and reports remain while uploader-linking fields are deleted, and backups may retain deleted data for up to 30 days.