Block File - Cylance Protect v2

Accepts a SHA256 hash and adds it to the Global Quarantine list using the Cylance Protect v2 integration.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Cylance Protect v2

Scripts

This playbook does not use any scripts.

Commands

  • cylance-protect-add-hash-to-list

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
SHA256The SHA256 hash of the file to block.SHA256FileOptional

Playbook Outputs


PathDescriptionType
CbResponse.BlockedHashes.LastBlock.TimeThe last block time.unknown
CbResponse.BlockedHashes.LastBlock.HostnameThe last block hostname.unknown
CbResponse.BlockedHashes.LastBlock.CbSensorIDThe last block sensor ID.unknown

Playbook Image


Block_File_Cylance_Protect_v2