Skip to main content

Cortex XDR - quarantine file

This Playbook is part of the Cortex XDR by Palo Alto Networks Pack.#

Deprecated

Use Cortex XDR - quarantine file v2 instead.

Deprecated. Use Cortex XDR - quarantine file v2 instead.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • GenericPolling

Integrations#

  • CortexXDRIR

Scripts#

This playbook does not use any scripts.

Commands#

  • xdr-get-quarantine-status
  • xdr-file-quarantine

Playbook Inputs#


NameDescriptionDefault ValueRequired
file_hashThe file’s hash. Must be a valid SHA256 hash.Required
file_pathThe path for the selected file.Required
endpoint_idThe file's location in the system.Required

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


Cortex XDR - quarantine file