HookMesh is a correlation and workflow platform for file-based malware prevention and analysis. It integrates Malwation's Threat.Zone malware analysis sandbox and CDR (Content Disarm and Reconstruction) capabilities into a unified, configurable pipeline. Users can build custom workflows that define how incoming files are processed, choosing the order and combination of the following analysis stages: - Static analysis - CDR file sanitization - Dynamic analysis (sandboxing via Threat.Zone) When a threat is detected during dynamic analysis, HookMesh supports configurable response actions including email alerts and API-based notifications to external systems such as SIEM, SOAR, or issue tracking tools. The platform provides a dashboard that gives an overview of submissions, flows, modules, and API tokens, enabling teams to monitor and manage file analysis operations centrally.