Threat Grid Deprecated
Deprecated. Use Cisco Secure Malware Analytics (Threat Grid) v2 instead.
Forensics & Malware Analysis · Cisco Secure Malware Analytics
Configuration parameters
server— Server URL (e.g. https://192.168.0.1) (required)token— API token (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (43)
-
threat-grid-advanced-searchDeprecatedAdvanced search that allows searching URLS, Submissions, Samples etc...
-
threat-grid-detonate-fileDeprecatedDetonates URL address through Threat Grid
-
threat-grid-download-artifactDeprecatedDownload an artifact by using its ID.
-
threat-grid-download-sample-by-idDeprecatedDownload a sample by using its ID. The downloaded file is an archive of the sample itself, in a zip format as a form of quarantine.
-
threat-grid-feeds-artifactsDeprecatedGet artifacts threat feed
-
threat-grid-feeds-domainDeprecatedGet domain threat feed
-
threat-grid-feeds-ipDeprecatedGet ips threat feed
-
threat-grid-feeds-network-streamDeprecatedGet network stream threat feed
-
threat-grid-feeds-pathDeprecatedGet path threat feed
-
threat-grid-feeds-urlDeprecatedGet url threat feed
-
threat-grid-get-analysis-annotationsDeprecatedReturns data regarding the annotations of the anlysis
-
threat-grid-get-analysis-artifactDeprecatedReturns the sample id artifact with artifact id
-
threat-grid-get-analysis-artifactsDeprecatedReturns the sample id artifacts
-
threat-grid-get-analysis-by-idDeprecatedThe detailed overview of dynamic and static analysis results for the sample
-
threat-grid-get-analysis-iocDeprecatedReturns data regarding the specified Indicator of Compromise
-
threat-grid-get-analysis-iocsDeprecatedReturns a JSON list of the Indicators of Compromise identified in this sample run
-
threat-grid-get-analysis-metadataDeprecatedReturns metadata about the analysis
-
threat-grid-get-analysis-network-streamDeprecatedReturns data regarding a specific network stream
-
threat-grid-get-analysis-network-streamsDeprecatedReturns the network stream analysis
-
threat-grid-get-analysis-processDeprecatedReturns data regarding the specifiic process id in the analysis
-
threat-grid-get-analysis-processesDeprecatedReturns data regarding the analysis processes
-
threat-grid-get-html-report-by-idDeprecatedGet the report.html file for a specific Sample ID. This is a stand-alone file with a complete report on the sample run. It is designed to be emailed or printed.
-
threat-grid-get-pcap-by-idDeprecatedGet the tcpdump PCAP file for a specific Sample ID, with all the network activity of the sample
-
threat-grid-get-processes-by-idDeprecatedGet a JSON object which contains a timeline of all process activities as determined by the dynamic analysis engine.
-
threat-grid-get-sample-by-idDeprecatedGet threat grid sample by id
-
threat-grid-get-sample-state-by-idDeprecatedGet threat grid sample state by id
-
threat-grid-get-samplesDeprecatedSearch samples on the Threat Grid platform. Input parameters are ANDed together. Only finished samples can be searched (that is, the ones that are having a status of succ or fail.)
-
threat-grid-get-samples-stateDeprecatedGet threat grid samples state
-
threat-grid-get-specific-feedDeprecatedGets a specific threat feed
-
threat-grid-get-summary-by-idDeprecatedReturns summary analysis information
-
threat-grid-get-threat-summary-by-idDeprecatedReturns a summary of the threats detected during analysis
-
threat-grid-get-video-by-idDeprecatedGet the sample analysis video by id
-
threat-grid-get-warnings-by-idDeprecatedGets a JSON structure describing any warnings that occured during the analysis
-
threat-grid-organization-get-rate-limitDeprecatedGet rate limits applied to an organization. ThreatGrid employs a simple rate limiting method for sample submissions by specifying the number of samples which can be submitted within some variable time period by an entire organization and/or per a license basis. Multiple rate limits can be employed to form overlapping submission limits. For example, 20 submissions per hour AND 400 per day.
-
threat-grid-search-ipsDeprecatedSearch IPs. Please provide a single argument (only one) to use this command, as the API supports 1 filter at a time.
-
threat-grid-search-samplesDeprecatedSearch Samples. Please provide a single argument (only one) to use this command, as the API supports 1 filter at a time.
-
threat-grid-search-submissionsDeprecatedSearch threat grid submissions
-
threat-grid-search-urlsDeprecatedSearch urls. Please provide a single argument (only one) to use this command, as the API supports 1 filter at a time.
-
threat-grid-submit-urlsDeprecatedSubmit urls for analysis.
-
threat-grid-upload-sampleDeprecatedSubmits a sample to threat grid for analysis
-
threat-grid-url-to-fileDeprecatedConvert a URL into a file for Threat Grid file detonation.
-
threat-grid-user-get-rate-limitDeprecatedGet rate limit for a specific user name. ThreatGrid employs a simple rate limiting method for sample submissions by specifying the number of samples which can be submitted within some variable time period by a user. Multiple rate limits can be employed to form overlapping submission limits. For example, 20 submissions per hour AND 400 per day.
-
threat-grid-who-am-iDeprecatedGet logged in user