{"id":327,"date":"2026-11-13T09:16:37","date_gmt":"2026-11-13T08:16:37","guid":{"rendered":"https:\/\/mspbusiness.com\/en\/it-news\/eset-adds-investigation-lab-to-its-threat-intelligence-portfolio\/"},"modified":"2026-11-13T09:17:21","modified_gmt":"2026-11-13T08:17:21","slug":"eset-adds-investigation-lab-to-its-threat-intelligence-portfolio","status":"publish","type":"post","link":"https:\/\/mspbusiness.com\/en\/security\/eset-adds-investigation-lab-to-its-threat-intelligence-portfolio\/","title":{"rendered":"ESET adds Investigation Lab to its threat intelligence portfolio"},"content":{"rendered":"

ESET is expanding its Threat Intelligence portfolio with Investigation Lab. The service lets security analysts check indicators and suspicious files against ESET telemetry and threat intelligence. It combines IOC searches with sandbox analysis and is aimed at SOCs, CERTs and MSSPs. Access is provided through the ESET TI portal and an API.<\/strong><\/p>\n

ESET is positioning Threat Intelligence Investigation Lab as a second opinion for analysts who need to assess suspicious activity. The service builds on telemetry and threat intelligence that the company gathers itself. ESET says it will help analysts make better-informed decisions and determine more quickly which incidents require immediate attention.<\/p>\n

Roman Kov\u00e1\u010d, Chief Research Officer at ESET, says security teams encounter suspicious files and indicators of potential attacks every day. In his view, they need to establish quickly what is going on, while taking privacy into account. Kov\u00e1\u010d says Investigation Lab focuses on three questions: is something dangerous, where has the threat been seen before, and what is the next step. According to Kov\u00e1\u010d, the service makes ESET’s telemetry data more accessible to customers and adds information about the behaviour of potential threats. On that basis, teams can decide whether to block a threat, investigate further, escalate or close an alert.<\/p>\n

Components from existing products<\/h3>\n

Investigation Lab combines technology from various parts of ESET. The service uses insights from ESET LiveGuard Advanced, the behaviour monitoring module within ESET PROTECT. According to the company, it also draws on the expertise of ESET Research and its own Threat Intelligence and MDR teams.<\/p>\n

IOC Search and Sample Submission<\/h3>\n

The service consists of two functions that come together in a single workflow. IOC Search lets you check IP addresses, URLs, file hashes and domains. ESET compares this data against its own curated telemetry and threat intelligence.<\/p>\n

Sample Submission lets you submit suspicious files for analysis. ESET runs these files in a sandbox, an isolated environment, and analyses the behaviour they exhibit there. The results are presented in reports that, according to the company, analysts can act on immediately.<\/p>\n

By combining the two functions, ESET aims to shorten the path from an initial check to a follow-up action. Possible next steps cited by the company include gathering additional information, blocking threats, isolating affected systems, further investigation or closing an incident.<\/p>\n

Target audience and integration<\/h3>\n

ESET is aiming Investigation Lab at Security Operations Centres (SOCs) of large organisations, government bodies, Computer Emergency Response Teams (CERTs) and Managed Security Service Providers (MSSPs). The company says the service integrates with existing Cyber Threat Intelligence solutions without requiring major changes to existing SOC processes.<\/p>\n

The service is available as a separate component within the ESET Threat Intelligence portfolio. It can be used through the ESET TI portal or through an API, which allows other systems to exchange information with the service automatically. The company’s announcement says nothing about pricing or licensing models.<\/p>\n","protected":false},"excerpt":{"rendered":"

ESET is expanding its Threat Intelligence portfolio with Investigation Lab for checking suspicious files and indicators. The service is partly aimed at MSSPs and has an API.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"mspb_bron_id":1169667,"mspb_url_nl":"https:\/\/mspbusiness.com\/security-en-privacy\/eset-voegt-investigation-lab-toe-aan-threat-intelligence-aanbod\/","mspb_url_de":"https:\/\/mspbusiness.com\/de\/security\/eset-ergaenzt-sein-threat-intelligence-angebot-um-investigation-lab\/","mspb_url_en":"","mspb_beeld_url":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/11\/hero-1794557782780.png","mspb_beeld_klein":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/11\/hero-1794557782780.png","mspb_auteur":"Redactie","mspb_beeld_alt":"","mspb_video":"","_yoast_wpseo_metadesc":"ESET Threat Intelligence Investigation Lab combines IOC checks and sandbox analysis of files for SOCs, CERTs and MSSPs.","footnotes":""},"categories":[3],"tags":[],"layout":[6],"class_list":["post-327","post","type-post","status-publish","format-standard","hentry","category-security","layout-news"],"_links":{"self":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/327","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/comments?post=327"}],"version-history":[{"count":1,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/327\/revisions"}],"predecessor-version":[{"id":328,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/327\/revisions\/328"}],"wp:attachment":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/media?parent=327"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/categories?post=327"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/tags?post=327"},{"taxonomy":"layout","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/layout?post=327"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}