Multi-threat analyzer array system and method of use

A system for determining the threat level of a sample, comprising:

• a. a multi-analyzer array running on a server, wherein the server is a computing device comprising a data processor and the ability to execute one or more instructions, the array comprising:
• i. a static analyzer,
• ii. a plurality of dynamic analyzers, wherein at least two of the plurality of dynamic analyzers are sandboxes, wherein each of the at least two sandboxes is of a different sandbox developer,
• iii. an arbitrator,
• iv. at least one post processing process, and
• v. a normalizer process;
• wherein said sample is analyzed by said static analyzer to produce a static analysis;
• wherein said arbitrator reviews said static analysis to determine based on said static analysis which of said plurality of dynamic analyzers to utilize for dynamic analysis of said sample;
• wherein the normalizer translates the request to the determined dynamic analyzer from a generic request syntax into the request syntax used by the determined dynamic analyzer;
• wherein the determined dynamic analyzer as chosen by said arbitrator performs dynamic analysis of the sample to produce a dynamic analysis of said sample, wherein said normalizer normalizes said dynamic analysis to a format for post processing by said at least one post processing process;
• wherein said at least one post processing process analyzes the normalized dynamic analysis to provide a post processing analysis and to determine a threat level of said sample;
• and wherein said arbitrator analyzes said post processing analysis and said threat level of said sample to determine whether to further analyze said sample in one of said plurality of dynamic analyzers not previously chosen by said arbitrator.