Detonate URL - WildFire-v2

Deprecated. Use Detonate URL - WildFire v2.2 instead.

Inputs

URL — URL of the webpage or file url to detonate. The URL is taken from the context.
Interval — Duration for executing the pooling (in minutes)
Timeout — The duration after which to stop pooling and to resume the playbook (in minutes)
ReportFileType — The resource type to download. Default is pdf. xml is also possible.

DBotScore — The DBotScore object.
DBotScore.Score — The actual score.
File.Size — File size.
File.MD5 — MD5 hash of the file.
File.SHA1 — SHA1 hash of the file.
File.Type — File type e.g. "PE".
File.SHA256 — SHA256 hash of the file.
File.EntryID — The Entry ID of the sample.
File.Malicious.Vendor — For malicious files, the vendor that made the decision.
File.Name — Filename.
File.Malicious.Description — For malicious files, the reason for the vendor to make the decision.
DBotScore.Indicator — The indicator we tested.
DBotScore.Type — The type of the indicator.
DBotScore.Vendor — Vendor used to calculate the score.
IP.Address — IP's relevant to the sample.
File — The File object.
InfoFile — The report file object.
InfoFile.EntryID — The EntryID of the report file.
InfoFile.Extension — The extension of the report file.
InfoFile.Name — The name of the report file.
InfoFile.Info — The info of the report file.
InfoFile.Size — The size of the report file.
InfoFile.Type — The type of the report file.
File.Malicious — The malicious object.
WildFire.Report — The submission object.
WildFire.Report.MD5 — MD5 of the submission.
WildFire.Report.SHA256 — SHA256 of the submission.
WildFire.Report.FileType — The type of the submission.
WildFire.Report.Status — The status of the submission.
WildFire.Report.Size — The size of the submission.