▁them ▁using ▁thousands ▁of ▁virtual ▁sand box es ▁and ▁hundreds ▁of ▁iron ▁sand box es . ▁It ▁regularly ▁re - analy zes ▁raw ▁data ▁previously ▁collected . ▁The ▁results ▁of ▁these ▁anal ys es ▁are ▁stored ▁in ▁the ▁organization ' s ▁analysis ▁cluster . ▁ ▁Network ▁reporting ▁ ▁Sh adow server ▁sends ▁free ▁daily ▁network ▁reports ▁to ▁users ▁who ▁have ▁subscri bed ▁to ▁them . ▁The ▁reports ▁contain ▁all ▁the ▁data ▁that ▁Sh adow server ▁has ▁collected ▁and ▁analyz ed ▁about ▁any ▁susp icious ▁activity ▁it ▁was ▁able ▁to ▁detect ▁within ▁the ▁specific ▁networks ▁or ▁regions ▁for ▁which ▁the ▁subscri ber ▁is ▁responsible . ▁For ▁example , ▁a ▁national ▁government ▁might ▁receive ▁data ▁aggreg ated ▁by ▁ge o - sp atial ▁coordinates ▁defined ▁by ▁latitude ▁and ▁longitude , ▁while ▁an ▁international ▁network ▁provider ▁might ▁receive ▁data ▁filtered ▁by ▁AS N . ▁ ▁Investig ation ▁support ▁ ▁Sh adow server ▁l ia ises ▁with ▁security ▁organizations , ▁national ▁govern ments , ▁and ▁C SI RT s ▁to ▁dis m ant le ▁global ▁cy ber cr ime ▁networks ; ▁for ▁example , ▁it ▁worked ▁with ▁the ▁F BI , ▁Europ ol , ▁and ▁Inter pol ▁to ▁take ▁down ▁the ▁A val anche ▁network ▁in ▁ 2 0 1 6 . ▁It ▁also ▁helps ▁law ▁enfor cement ▁partners ▁to ▁develop ▁strateg ies ▁against ▁cy ber ▁security ▁thre ats ▁and ▁to ▁mit ig ate ▁thre ats ▁as ▁they ▁emer ge , ▁foc using ▁on ▁cases ▁that ▁involve ▁criminal ▁ab use ▁of ▁the ▁Internet ’ s ▁infrastr ucture