Get File Sample From Path - Generic V2

Deprecated. Use `Get File Sample From Path - Generic V3` instead. This playbook returns a file sample correlating to a path into the War Room using the following sub-playbooks: inputs: 1) Get File Sample From Path - D2. 2) Get File Sample From Path - VMware Carbon Black EDR (Live Response API).

Pack

CommonPlaybooks

Tasks

6

Inputs

• UseD2 — Determines whether a D2 agent will be used to retrieve the file. Options: no (default) yes
• Hostname — Hostname of the machine on which the file is located.
• Path — The path of the file to retrieve. For example: C:\users\folder\file.txt
• Agent_ID — The ID of the agent, or of the endpoint, in the relevant integration (such as EDR).

Outputs

• File.Size — The size of the file.
• File.Type — The type of the file.
• File.Info — General information of the file.
• File.MD5 — The MD5 hash of the file.
• File.SHA1 — The SHA1 hash of the file.
• File.SHA256 — The SHA256 hash of the file.
• File.SHA512 — The SHA512 hash of the file.
• File.EntryID — The file entry ID.
• File.Extension — The file extension.
• File.Name — The file name.
• File.SSDeep — File SSDeep.