WildFire-v2

Perform malware dynamic analysis.

Category

Forensics & Malware Analysis

Pack

Palo_Alto_Networks_WildFire

Configuration parameters

• server — Server base URL (e.g., https://192.168.0.1/publicapi) (required)
• credentials —
• credentials_source — API Key Type
• integrationReliability — Source Reliability
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• suppress_file_type_error — Return warning entry for unsupported file types
• token — API Key (Deprecated)
• create_relationships — Create relationships

Commands (9)

• file — Retrieve results for a file hash using WildFire.
• wildfire-get-sample — Retrieves a sample.
• wildfire-get-url-webartifacts — Get web artifacts for a URL webpage. An empty tgz will be returned, no matter what the verdict is, or even if the URL is malformed.
• wildfire-get-verdict — Returns a verdict for a hash.
• wildfire-get-verdicts — Returns a verdict regarding multiple hashes, stored in a TXT file or given as a list.
• wildfire-report — Retrieves results for a file hash using WildFire.
• wildfire-upload — Uploads a file to WildFire for analysis.
• wildfire-upload-file-url — Uploads the URL of a remote file to WildFire for analysis.
• wildfire-upload-url — Uploads a URL of a webpage to WildFire for analysis.