Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Auto Focus Lenz: Taking the Blue (Team) Pill

Summary: Palo Alto Networks released AutoFocus Lenz, a script built on its AutoFocus Python Client Library (af_lenz.py) that pulls threat intelligence from the AutoFocus API and displays it to speed up analytical tasks. The initial release includes 8 functions that return data based on a user's query, and their output can be filtered by how prevalent an artifact is across the AutoFocus corpus, so an artifact seen in 1 million samples can be dropped as non-unique.

Bottom line: The tool's core filter is prevalence: an artifact appearing in 1 million samples can be discarded, which means the judgment about what counts as unique enough to act on rests on the corpus you are querying against.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Detection & Response
Related
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026