Code42 File Download

This playbook searches for files via Code42 security events by either MD5 or SHA256 hash. The data is output to the Code42.SecurityData context for use.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Code42

Scripts

This playbook does not use any scripts.

Commands

  • code42-securitydata-search
  • code42-download-file

Playbook Inputs


NameDescriptionDefault ValueRequired
MD5MD5 hash to search forFile.MD5Optional
SHA256SHA256 hash to search forFile.SHA256Optional

Playbook Outputs


PathDescriptionType
File.SizeFile size in bytesunknown
File.SHA1The SHA1 hash of the file.unknown
File.SHA256SHA256 hash of fileunknown
File.NameFile nameunknown
File.SSDeepThe SSDeep hash of the file.unknown
File.EntryIDThe entry ID of the file.unknown
File.InfoFile information.unknown
File.TypeThe file type.unknown
File.MD5The MD5 hash of the file.unknown
File.ExtensionThe file extension.unknown

Playbook Image


Code42 Exfiltration Playbook