Enrich McAfee DXL using 3rd party sandbox
This Playbook is part of the Deprecated Content (Deprecated) Pack.#
Deprecated
Use "Enrich McAfee DXL using 3rd party sandbox v2" playbook instead.
DEPRECATED. Use "Enrich McAfee DXL using 3rd party sandbox v2" playbook instead. Detonates a file in Wildfire and if malicious, pushes its MD5, SHA1 and SHA256 file hashes to McAfee DXL. Example of bridging DXL to a third party sandbox.
Dependencies#
This playbook uses the following sub-playbooks, integrations, and scripts.
Sub-playbooks#
This playbook does not use any sub-playbooks.
Integrations#
- McAfee DXL
Scripts#
- CloseInvestigation
- Exists
Commands#
- dxl-send-event
Playbook Inputs#
There are no inputs for this playbook.
Playbook Outputs#
There are no outputs for this playbook.
Playbook Image#
