Get File Sample By Hash - Cylance Protect v2

This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

  • Cylance Protect v2

Scripts

This playbook does not use any scripts.

Commands

  • cylance-protect-download-threat

Playbook Inputs


NameDescriptionDefault ValueRequired
SHA256File.SHA256Optional
unzipSpecifies whether the downloaded file will be unzipped. The command default is 'no'.
Yes - unzip automatically
No - will not unzip
Optional

Playbook Outputs


PathDescriptionType
File.SHA256SHA256 hash of the file.unknown
File.NameFile name.unknown
File.SizeFile size.unknown
File.SafelistedWhether the file is on the Safe List.unknown
File.TimestampTimestamp.unknown
File.MD5MD5 hash of the file.unknown

Playbook Image


Get File Sample By Hash - Cylance Protect v2