Extract Indicators From File - Generic v2

Extracts indicators from a file.

Supported file types:

  • PDF
  • TXT
  • HTM, HTML
  • DOC, DOCX
  • CSV
  • And more

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

This playbook does not use any integrations.

Scripts

  • Set
  • ExtractIndicatorsFromTextFile
  • ExtractIndicatorsFromWordFile
  • ReadPDFFileV2
  • ConvertFile

Commands

  • image-ocr-extract-text

Playbook Inputs


NameDescriptionDefault ValueSourceRequired
FileThe file from which to extract indicators.NoneFileOptional

Playbook Outputs


PathDescriptionType
Domain.NameThe extracted domains.unknown
Account.Email.AddressThe extracted emails addresses.unknown
File.MD5The extracted MD5 hash of the file.unknown
File.SHA1The extracted SHA1 hash of the file.unknown
File.SHA256The extracted SHA256 hash of the file.unknown
IP.AddressThe extracted IP addresses.unknown
File.TextThe text or images extracted from the PDF file.unknown
File.ProducerThe producer of the PDF file.unknown
File.TitleThe title of the PDF file.unknown
File.xapThe XAP of the PDF file.unknown
File.AuthorThe author of the PDF file.unknown
File.dcThe DC of the PDF file.unknown
File.xapmmThe XAPMM of the PDF file.unknown
File.ModDateThe modified date of the PDF file.unknown
File.CreationDateThe creation date of the PDF file.unknown
File.PagesThe number of pages in the PDF file.unknown
URL.DataThe list of URLs that were extracted from the PDF file.unknown

Playbook Image


Extract_Indicators_From_File_Generic_v2