Block File - Cylance Protect v2

Accepts a SHA256 hash and adds it to the Global Quarantine list using the Cylance Protect v2 integration.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Cylance Protect v2

Scripts#

This playbook does not use any scripts.

Commands#

  • cylance-protect-add-hash-to-list

Playbook Inputs#


NameDescriptionDefault ValueSourceRequired
SHA256The SHA256 hash of the file to block.SHA256FileOptional

Playbook Outputs#


PathDescriptionType
CbResponse.BlockedHashes.LastBlock.TimeThe last block time.unknown
CbResponse.BlockedHashes.LastBlock.HostnameThe last block hostname.unknown
CbResponse.BlockedHashes.LastBlock.CbSensorIDThe last block sensor ID.unknown

Playbook Image#


Block_File_Cylance_Protect_v2