Skip to main content

Hurukai - Get All Artifacts

This Playbook is part of the HarfangLab EDR Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.2.0 and later.

Build a global archive with:

  • MFT (Windows)
  • Hives (Windows)
  • USN logs (Windows)
  • Prefetch files (Windows)
  • EVT/EVTX files (Windows)
  • Log files (Linux)
  • Filesystem content (Linux)

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • GenericPolling

Integrations#

  • Hurukai

Scripts#

This playbook does not use any scripts.

Commands#

  • harfanglab-result-artifact-all
  • harfanglab-job-artifact-all
  • harfanglab-get-endpoint-info

Playbook Inputs#

NameDescriptionDefault ValueRequired
agentidRequired

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Hurukai - Get All Artifacts

Edit this page
Report an Issue