The new SPARK v1.14.16 supports the sample quarantine protocol named Bifrost.
With Bifrost you’re able to send suspicious samples that THOR or SPARK detect on endpoints directly to a central server for analysis.
A Bifrost server is shipped in form of a Python script with THOR and SPARK. (./tools sub folder)
You can also activate the Bifrost server on our ASGARD platform.