FortiSandboxv2

FortiSandbox is an advanced security tool that goes beyond standard sandboxing. It combines proactive mitigation, enhanced threat detection, and in-depth reporting, using Fortinet's dynamic antivirus technology, dual-level sandboxing, and FortiGuard cloud integration to counter advanced threats. It effectively detects viruses, Advanced Persistent Threats (APTs), and malicious URLs, integrating seamlessly with existing Fortinet devices like FortiGate and FortiMail for comprehensive network protection.

Category

Forensics & Malware Analysis

Pack

FortiSandbox

Configuration parameters

• base_url — Base URL (required)
• credentials — Username (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• integration_reliability — Source Reliability (required)

Commands (8)

• file — Runs reputation on files.
• fortisandbox-submission-cancel — Cancel a running job submission. Note: Jobs that are already being processed cannot be canceled, only jobs that are in the queue.
• fortisandbox-submission-file-upload — Scheduled command to upload any file type to be sandboxed. The system swiftly identifies and mitigates threats in files.
• fortisandbox-submission-job-list — Get a list of jobs that were created from a submission.
• fortisandbox-submission-job-report — Get a PDF report of the provided submission.
• fortisandbox-submission-job-verdict — Get the verdict of the provided job.
• fortisandbox-submission-url-upload — Scheduled command to upload URLs through a text file or directly to be sandboxed individually. The system rigorously examines URLs for online security hazards.
• url — Runs reputation on URLs.