Viper

Details

ID	`Viper`
Provider	VOXX International
Category	Forensics & Malware Analysis
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

Viper is a binary analysis and management framework.

Configure Viper in Cortex

Parameter	Required
Server URL	True
API Key	True
Trust any certificate (not secure)	False
Use system proxy settings	False
Viper Project	True

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

viper-download

Download a sample with file hash

Base Command

viper-download

Input

Argument Name	Description	Required
file_hash	SHA256 Value.	Required

Context Output

There is no context output for this command.

viper-search

Search for sample with file hash

Base Command

viper-search

Input

Argument Name	Description	Required
file_hash	SHA256 Value.	Required

Context Output

There is no context output for this command.

Configuration parameters

url — Server URL (required)
apikey — API Key (required)
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
viper_project — Viper Project (required)

Commands (2)

viper-download
Download a sample with file hash
viper-search
Search for sample with file hash

Source

Viper.py Viper.yml Viper_description.md

Download History Raw

category: Forensics & Malware Analysis
provider: VOXX International
commonfields:
  id: Viper
  version: -1
configuration:
- display: Server URL
  name: url
  required: true
  type: 0
- display: API Key
  name: apikey
  required: true
  type: 4
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- defaultvalue: default
  display: Viper Project
  name: viper_project
  required: true
  type: 0
description: 'Viper is a binary analysis and management framework. '
display: Viper
name: Viper
script:
  commands:
  - arguments:
    - description: SHA256 Value.
      name: file_hash
      required: true
    description: Download a sample with file hash
    name: viper-download
  - arguments:
    - description: SHA256 Value.
      name: file_hash
      required: true
    description: Search for sample with file hash
    name: viper-search
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)