Investigation Lab: Make the right call, faster
Get a trusted second opinion on suspicious files and indicators. Use IOC Search and deep sandbox analysis to reduce uncertainty, accelerate investigations and make confident decisions.
Turn uncertainty into confident action
Get reliable evidence backed by ESET's global telemetry, decades of threat research experience and internal analysis infrastructure. Reduce uncertainty and make informed decisions without exposing sensitive samples.
GAIN CONFIDENCE
Validate suspicious activity against ESET’s proprietary telemetry and threat intelligence for a credible second opinion.
DECIDE FASTER
Move quickly from IOC enrichment to deeper behavioral analysis, helping you get the evidence for the right response sooner.
CUT THROUGH THE NOISE
ESET experts curate and review findings to ensure confirmed indicators are always precise, relevant and ready for action.
KEEP THINGS PRIVATE
Analyze suspicious files without unnecessarily exposing sensitive samples or investigation details.
How it works
Integrate ESET Threat Intelligence Investigation Lab into your existing stack through APIs or use it manually. When external alerts from your SIEM, SOAR, XDR or TIP require validation, use IOC Search to quickly assess suspicious indicators against ESET telemetry, then submit priority files for deeper behavioral analysis when needed. Based on the outcome, make an informed, confident decision whether to block, investigate, escalate or close.
IOC Search
Search suspicious indicators against ESET telemetry and reputation data to quickly enrich alerts, triage large volumes and determine what deserves further investigation.
Sample Submission
Submit suspicious files for in-depth sandbox analysis to uncover behavioral evidence and get readable, analyst-friendly insights without maintaining additional infrastructure.
Choose the right fit for your SOC
Investigation Lab
Investigation Lab Advanced
Best suited for
Teams needing reliable IOC enrichment and occasional deep file analysis
Teams with higher investigation volumes and advanced analysis needs
Full API Access
- Yes
- Yes
IoC Search (botnets, C&Cs, domains, IPs, URLs)
1,000/day; 5,000/week
10,000/day; 50,000/week
Advanced querying across ESET database
- Yes
- Yes
Sample Submission
50/day; 250/week
500/day; 2,500/week
In-depth behavioral analysis
- Yes
- Yes
Sandbox customization
- No
- Yes
Sandbox processing priority
Standard
High
Sample privacy
Standard — sample deleted;
verdict and hash retained
High — sample,
verdict and hash deleted
Expand your Threat Intelligence coverage
THE LATEST ESET THREAT REPORT
An in-depth look at global threat trends, regional APT activity and malware developments observed through ESET telemetry.
LET’S CONNECT
Curious to learn more? Share your contact details and we’ll follow up with more information.
We can walk you through a demo, discuss a proof of concept or answer any questions you may have.