Intezer - Analyze by hash

Analyze the given file hash on Intezer Analyze and enrich the file reputation. Supports SHA256, SHA1, and MD5.

Pack

Intezer

Tasks

8

Inputs

• Interval — How often the polling command should run (in minutes).
• Timeout — Amount of time to wait before a timeout occurs (in minutes).
• hash

Outputs

• File.SHA256 — SHA256 hash of the file.
• File.Malicious — The file malicious description.
• File.Type — File type, for example: "PE".
• File.Size — File size.
• File.MD5 — MD5 hash of the file.
• File.Name — File name.
• File.SHA1 — SHA1 hash of the file.
• File — The file object.
• File.Malicious.Vendor — For malicious files, the vendor that made the decision.
• DBotScore — The DBotScore object.
• DBotScore.Indicator — The indicator that was tested.
• DBotScore.Type — The indicator type.
• DBotScore.Vendor — Vendor used to calculate the score.
• DBotScore.Score — The actual score.

Commands used

• intezer-analyze-by-hash
• intezer-get-analysis-result