Secure Endpoint (Former AMP For Endpoints) and Secure Malware Analytics (Former Threat Grid) are two different products. Secure Endpoint allows for 200 Dynamic File Submissions to Threat Grid per day across the entire organization. On the front page of the Secure Endpoint console you can see your organizations daily submissions. If the number is higher than 200, you need to purchase an additional license to upgrade the number of submission or purchase ThreatGrid as a product itself.
The Sandbox functionality within Secure Endpoint is limited in the way that you can submit files to Threat Grid and a report is made available in the AMP Dashboard.
Alternatively, you can purchase Threat Grid (Secure Malware Analytics) which provides another cloud console to manage your file submissions.
Some of the features you get from purchasing Threat Grid as a product instead of a submissions license for Secure Endpoint is:
Threat intelligence context & correlation (pivot in reports with hyperlinks)
Interact with malware samples in Glovebox
Download Report JSON
Registry Activity report / Download Registry contents JSON
Process Graph and Process Timeline JSON
Adjust run times of sample analysis
Advanced search (samples, artifacts, registry, URLs, etc)
API integration for automation of sample uploads and Threat Intelligence, including RSA's Security Analytics, Guidance Software's EnCase, TripWire Enterprise, Splunk, QRadar, ArcSight, etc.
Threat Intelligence Feeds
Best Regards
Nicolai Borchorst
CCIE Security #65775
