According to the NIST.SP 800-150 guide to cyber threat information sharing, before uploading an infected file containing sensitive information to a hybrid-analysis sandbox, the analyst is required to remove all personally identifiable information (PII) to safeguard privacy. This step is crucial to protect the identities of individuals and comply with privacy laws and regulations. PII includes any data that could potentially identify a specific individual, such as names, addresses, social security numbers, and other identifiers1.
References:
* NIST.SP 800-150 provides guidelines for cyber threat information sharing, which includes the handling of sensitive information and the importance of removing PII to maintain privacy and security