Detonate URL - FireEye AX
This Playbook is part of the FireEye (AX Series) Pack.#
Supported versions
Supported Cortex XSOAR versions: 6.2.0 and later.
Detonating URL with FireEye AX.
Dependencies#
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks#
- GenericPolling
Integrations#
- fireeye
- Fireeye
Scripts#
- Sleep
Commands#
- fe-submit-url-result
- fe-submit-url
- fe-submit-url-status
Playbook Inputs#
| Name | Description | Default Value | Required |
|---|---|---|---|
| URL | URL to detonate | URL.Data | Optional |
| interval | How often to poll for results. | 1 | Optional |
| timeout | How long to wait before giving up waiting for results. | 30 | Optional |
| Info_Level | This parameter specifies the level of information to be returned in the URL submission report. Information levels include concise (default), normal, or extended. | Optional |
Playbook Outputs#
| Path | Description | Type |
|---|---|---|
| FireEyeAX.Submissions.URL.Key | The submission key. | unknown |
| FireEyeAX.Submissions.Severity | The severity level of the file. | unknown |
| FireEyeAX.Submissions.InfoLevel | The info level of the report. | unknown |
| DBotScore.Score | The actual score. | unknown |
| DBotScore.Indicator | The indicator that was tested. | unknown |
| DBotScore.Vendor | Vendor used to calculate the score. | unknown |
Playbook Image#
