Block File - Cylance Protect v2
This Playbook is part of the Cylance Protect Pack.#
Accepts a SHA256 hash and adds it to the Global Quarantine list using the Cylance Protect v2 integration.
Dependencies#
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks#
This playbook does not use any sub-playbooks.
Integrations#
- Cylance Protect v2
Scripts#
This playbook does not use any scripts.
Commands#
- cylance-protect-add-hash-to-list
Playbook Inputs#
| Name | Description | Default Value | Source | Required |
|---|---|---|---|---|
| SHA256 | The SHA256 hash of the file to block. | SHA256 | File | Optional |
Playbook Outputs#
| Path | Description | Type |
|---|---|---|
| CbResponse.BlockedHashes.LastBlock.Time | The last block time. | unknown |
| CbResponse.BlockedHashes.LastBlock.Hostname | The last block hostname. | unknown |
| CbResponse.BlockedHashes.LastBlock.CbSensorID | The last block sensor ID. | unknown |
Playbook Image#
