Skip to main content

Cortex XDR - Get File Path from alerts by hash

This Playbook is part of the Palo Alto Networks Cortex XDR - Investigation and Response Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.5.0 and later.

This playbook is part of the 'Malware Investigation And Response' pack. For more information, refer to https://xsoar.pan.dev/docs/reference/packs/malware-investigation-and-response. This playbook assists in retrieving file paths from the Cortex XDR incident by hash.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

This playbook does not use any integrations.

Scripts#

SetAndHandleEmpty

Commands#

This playbook does not use any commands.

Playbook Inputs#


NameDescriptionDefault ValueRequired
NonFoundHashesList of hashes to run against.Optional

Playbook Outputs#


PathDescriptionType
fileRetrievalThe path for the requested file.unknown

Playbook Image#


Cortex XDR - Get File Path from alerts by hash