Search Endpoints By Hash - Cybereason

Hunt for endpoint activity involving hash, using Cybereason.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

  • Cybereason

Scripts#

This playbook does not use any scripts.

Commands#

  • cybereason-query-file

Playbook Inputs#


NameDescriptionDefault ValueSourceRequired
MD5HashMD5 HashMD5FileOptional
SHA1HashSHA1 HashSHA1FileOptional

Playbook Outputs#


PathDescriptionType
Endpoint.HostnameDevice hostnamestring
EndpointThe endpointunknown

Playbook Image#


Search Endpoints By Hash - Cybereason