Block File - Cybereason

Accepts an MD5 hash and blocks the file using the Cybereason integration.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Cybereason

Scripts

This playbook does not use any scripts.

Commands

  • cybereason-prevent-file

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
MD5The MD5 hash of the file to block.MD5FileOptional

Playbook Outputs


PathDescriptionType
CbResponse.BlockedHashes.LastBlock.TimeThe last block timeunknown
CbResponse.BlockedHashes.LastBlock.HostnameThe last block hostnameunknown
CbResponse.BlockedHashes.LastBlock.CbSensorIDThe last block sensor IDunknown

Playbook Image


Block_File_Cybereason