Get File Sample By Hash - Cylance Protect

Returns a file sample correlating to SHA256 hashes to the War Room, in the inputs using Cylance Protect integration.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Cylance Protect v2
  • Cylance Protect

Scripts#

  • UnzipFile
  • Exists
  • http

Commands#

  • cylance-protect-download-threat

Playbook Inputs#


NameDescriptionDefault ValueSourceRequired
SHA256The SHA256 hash of the file to download.SHA256FileOptional
ZipPasswordThe password for the zip file.infected-Required

Playbook Outputs#


PathDescriptionType
FileThe sample file.unknown

Playbook Image#


Get_File_Sample_By_Hash_Cylance_Protect