File Private Scanning - Google Threat Intelligence

This playbook submits a file for private scanning, retrieves and evaluates the analysis verdict, and automatically creates a ServiceNow ticket using the "ServiceNow v2" integration when the file is determined to be malicious.

Pack

GoogleThreatIntelligence

Tasks

11

Inputs

• file_id — Fetch the Entry ID of the last submitted file from the incident.

Commands used

• gti-private-file-scan-and-analysis-get
• servicenow-update-ticket