Get File Sample By Hash - Cylance Protect v2

This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Cylance Protect v2

Scripts#

This playbook does not use any scripts.

Commands#

  • cylance-protect-download-threat

Playbook Inputs#


NameDescriptionDefault ValueRequired
SHA256File.SHA256Optional
unzipSpecifies whether the downloaded file will be unzipped. The command default is 'no'.
Yes - unzip automatically
No - will not unzip
Optional

Playbook Outputs#


PathDescriptionType
File.SHA256SHA256 hash of the file.unknown
File.NameFile name.unknown
File.SizeFile size.unknown
File.SafelistedWhether the file is on the Safe List.unknown
File.TimestampTimestamp.unknown
File.MD5MD5 hash of the file.unknown

Playbook Image#


Get File Sample By Hash - Cylance Protect v2