Convert file hash to corresponding hashes

The playbook enables you to get all of the corresponding file hashes for a file even if there is only one hash type available. For example, if we have only the SHA256 hash, the playbook will get the SHA1 and MD5 hashes as long as the original searched hash is recognized by any our the threat intelligence integrations.

Pack

CommonPlaybooks

Tasks

20

Inputs

• SHA256 — The SHA256 hash on which to search.
• SHA1 — The SHA1 hash on which to search.
• MD5 — The MD5 hash on which to search.

Outputs

• File.SHA256 — Output for detected SHA256 hash.
• File.SHA1 — Output for detected SHA1 hash.
• File.MD5 — Output for detected MD5 hash.
• Indicators.Value — Output for detected hashes.

Commands used

• enrichIndicators
• file