Get File Sample By Hash - Cylance Protect

Returns a file sample correlating to SHA256 hashes to the War Room, in the inputs using Cylance Protect integration.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Cylance Protect v2
  • Cylance Protect

Scripts

  • UnzipFile
  • Exists
  • http

Commands

  • cylance-protect-download-threat

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
SHA256The SHA256 hash of the file to download.SHA256FileOptional
ZipPasswordThe password for the zip file.infected-Required

Playbook Outputs


PathDescriptionType
FileThe sample file.unknown

Playbook Image


Get_File_Sample_By_Hash_Cylance_Protect