Triage

Triage by Hatching is a state-of-the-art malware sandbox designed for both high volume and detailed threat analysis. Its architecture is built from the ground up to scale, allowing organizations to process hundreds of thousands of file or URL analyses daily. It provides support across multiple operating systems – Windows, Linux, Android, macOS – enabling deep static and dynamic analysis of malware behaviour. One of its standout strengths is the live interaction capability: analysts can observe malware being executed in virtual machines in real time, take control of the VM, and use preconfigured or custom profiles to guide how samples are processed. Reporting is streamlined: key insights like malware configuration, extracted artifacts, dropped payloads, and relevant behavioural indicators are summarized in focused dashboards or via API automation, reducing information overload. While not trivial to deploy at scale, and perhaps less accessible for those lacking infrastructure or budgets, Triage delivers powerful tools for organizations that demand both detail and throughput in malware analysis.