Frequently asked questions

Can I delete a submission?

All submissions are publicly visible and cannot be deleted. We don't allow deletion to prevent people abusing the free Triage service.

Users of the Recorded Future Enterprise Sandbox can delete submissions. If you are a Recorded Future Enterprise Sandbox customer and this option is not available to you, your user may be lacking the permissions to delete submissions. Please contact a sandbox administrator for your organisation to have a submission removed.

Do you offer private submissions?

All submissions are publicly visible, if you or your organisation are interested in private analyses please see the Recorded Future Enterprise Sandbox for more details.

Submissions to the Recorded Future Enterprise Sandbox are private by default and only accessible to authorised users in your organisation.

What is the maximum runtime of a behavioral analysis?

API submission: 1 hour (3600 seconds)

UI submission: 30 minutes + Extend analysis button (1 minute increments, limited to 10 minutes total)

Where can I find my API key/token?

The API key/token associated with your account can be found on the the Account page when you are logged on Triage. On this page you will find an 'API access' section containing it.

See this page for more information on how to use it.

Why is this dropped file not in the downloadable files section?

We try to make informed decisions on which files to expose in the report, mostly to avoid clutter. This unfortunately means some files slip through.

There is a feature that forces Triage to dump and expose a file. This can be achieved by manually deleting a file in Windows File Explorer.

See this blog post for more information.

Do not hesitate to tell us by using the feedback button if you think a file should have been dumped and exposed.

I have another (technical) question that is not in these docs.

For business inquiries, please contact us at

For other questions, feel free to contact us as at Or, click the feedback button on an analysis page if you have feedback about a specific analysis. This will tell us what analysis the feedback is about.