PolySwarm Deprecated

Deprecated. Use PolySwarm V2 instead.

Data Enrichment & Threat Intelligence · PolySwarm

Details

IDPolySwarm
ProviderPolySwarm
CategoryData Enrichment & Threat Intelligence
From Version5.0.0
Docker Imagedemisto/python:2.7.18.20958
Supported ModulesAgentix XSIAM

Configuration parameters

  • api_key — PolySwarm API Key (required)
  • base_url — The base URL to connect to (required)
  • polyswarm_community — PolySwarm community (required)

Commands (9)

  • domain

    Queries PolySwarm to retrieve domain reputation information.

  • file

    Queries PolySwarm for file reputation information.

  • file-rescan

    Rescans the uploaded artifact by hash.

  • file-scan

    Uploads a file to PolySwarm and retrieves the analysis results.

  • get-file

    Downloads a file hash from PolySwarm.

  • ip

    Queries PolySwarm for IP reputation information.

  • polyswarm-get-report

    Returns a report using the UUID.

  • url

    Queries PolySwarm for URL reputation information.

  • url-scan

    Uploads a URL to PolySwarm and retrieves the analysis results.

Source

PolySwarm.py PolySwarm_test.py PolySwarm.yml PolySwarm_description.md
Download History Raw 
deprecated: true
category: Data Enrichment & Threat Intelligence
provider: PolySwarm
commonfields:
  id: PolySwarm
  version: -1
configuration:
- display: PolySwarm API Key
  name: api_key
  required: true
  type: 4
- defaultvalue: https://api.polyswarm.network/v1
  display: The base URL to connect to
  name: base_url
  required: true
  type: 0
- defaultvalue: lima
  display: PolySwarm community
  name: polyswarm_community
  required: true
  type: 0
description: Deprecated. Use PolySwarm V2 instead.
display: PolySwarm (Deprecated)
name: PolySwarm
script:
  commands:
  - arguments:
    - default: true
      description: UUID string.
      name: scan_uuid
      required: true
    description: Returns a report using the UUID.
    name: polyswarm-get-report
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - description: 'The value of the file hash for which to retrieve the reputation information. The hash type can be: "SHA256", "SHA1", or "MD5".'
      name: hash
    - default: true
      description: 'The type of the file hash for which to retrieve the reputation information. The hash type can be: "SHA256", "SHA1", or "MD5".'
      name: file
    description: Queries PolySwarm for file reputation information.
    name: file
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - default: true
      description: The IP address for which to retrieve the reputation information.
      name: ip
      required: true
    description: Queries PolySwarm for IP reputation information.
    name: ip
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - default: true
      description: The URL for which to retrieve the reputation information.
      name: url
      required: true
    description: Queries PolySwarm for URL reputation information.
    name: url
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - default: true
      description: Domain for which to retrieve the reputation information.
      name: domain
      required: true
    description: Queries PolySwarm to retrieve domain reputation information.
    name: domain
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - default: true
      description: The URL to scan.
      name: url
      required: true
    description: Uploads a URL to PolySwarm and retrieves the analysis results.
    name: url-scan
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - description: 'The type of the file hash to rescan. The hash type can be: "SHA256", "SHA1", or "MD5".'
      name: hash
      required: true
    description: Rescans the uploaded artifact by hash.
    name: file-rescan
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  - arguments:
    - default: true
      description: 'The file hash type to download. The hash type can be: "SHA256", "SHA1", or "MD5".'
      name: hash
      required: true
    description: Downloads a file hash from PolySwarm.
    name: get-file
    outputs:
    - contextPath: File.Size
      description: The file size.
      type: Number
    - contextPath: File.SHA1
      description: The SHA1 hash of the file.
      type: String
    - contextPath: File.SHA256
      description: The SHA256 hash of the file.
      type: String
    - contextPath: File.Name
      description: The sample name.
      type: String
    - contextPath: File.SSDeep
      description: The SSDeep hash of the file.
      type: String
    - contextPath: File.EntryID
      description: The War Room entry ID of the file.
      type: String
    - contextPath: File.Info
      description: Basic information of the file.
      type: String
    - contextPath: File.Type
      description: File type. For example, "PE".
      type: String
    - contextPath: File MD5
      description: The MD5 hash of the file.
      type: String
    - contextPath: File.Extension
      description: The file extension.
      type: String
    - contextPath: PolySwarm.FileID
      description: The file ID.
      type: String
  - arguments:
    - default: true
      description: The War Room entry ID of the file.
      name: entryID
      required: true
    description: Uploads a file to PolySwarm and retrieves the analysis results.
    name: file-scan
    outputs:
    - contextPath: PolySwarm.Total
      description: The total number of scans.
      type: Number
    - contextPath: PolySwarm.Permalink
      description: PolySwarm permalink results.
      type: String
    - contextPath: PolySwarm.Positives
      description: The total number of positives found.
      type: Number
    - contextPath: PolySwarm.Scan_UUID
      description: The PolySwarm scan UUID.
      type: String
    - contextPath: PolySwarm.Artifact
      description: The artifact queried.
      type: String
  runonce: false
  script: '-'
  subtype: python2
  type: python
  dockerimage: demisto/python:2.7.18.20958
fromversion: 5.0.0