Recorded Future File Intelligence

File enrichment using Recorded Future intelligence

Pack

RecordedFuture

Tasks

11

Inputs

• MD5 — File MD5 hash to enrich.
• SHA256 — File SHA-256 hash to enrich.
• SHA1 — File SHA-1 hash to enrich.

Outputs

• DBotScore.Indicator — The indicator that was tested
• DBotScore.Type — Indicator type
• DBotScore.Vendor — Vendor used to calculate the score
• DBotScore.Score — The actual score
• File.SHA256 — File SHA-256
• File.SHA512 — File SHA-512
• File.SHA1 — File SHA-1
• File.MD5 — File MD5
• File.CRC32 — File CRC32
• File.CTPH — File CTPH
• RecordedFuture.File.criticality — Risk Criticality
• RecordedFuture.File.criticalityLabel — Risk Criticality Label
• RecordedFuture.File.riskString — Risk String
• RecordedFuture.File.riskSummary — Risk Summary
• RecordedFuture.File.rules — Risk Rules
• RecordedFuture.File.score — Risk Score
• RecordedFuture.File.firstSeen — Evidence First Seen
• RecordedFuture.File.lastSeen — Evidence Last Seen
• RecordedFuture.File.intelCard — Recorded Future Intelligence Card URL
• RecordedFuture.File.hashAlgorithm — Hash Algorithm
• RecordedFuture.File.type — Entity Type
• RecordedFuture.File.name — Entity
• RecordedFuture.File.id — Recorded Future Entity ID
• RecordedFuture.File.metrics.type — Recorded Future Metrics Type
• RecordedFuture.File.metrics.value — Recorded Future Metrics Value
• RecordedFuture.File.threatLists.description — Recorded Future Threat List Description
• RecordedFuture.File.threatLists.id — Recorded Future Threat List ID
• RecordedFuture.File.threatLists.name — Recorded Future Threat List Name
• RecordedFuture.File.threatLists.type — Recorded Future Threat List Type
• RecordedFuture.File.relatedEntities.RelatedAttacker.count — Recorded Future Related Attacker Count
• RecordedFuture.File.relatedEntities.RelatedAttacker.id — Recorded Future Related Attacker ID
• RecordedFuture.File.relatedEntities.RelatedAttacker.name — Recorded Future Related Attacker Name
• RecordedFuture.File.relatedEntities.RelatedAttacker.type — Recorded Future Related Attacker Type
• RecordedFuture.File.relatedEntities.RelatedTarget.count — Recorded Future Related Target Count
• RecordedFuture.File.relatedEntities.RelatedTarget.id — Recorded Future Related Target ID
• RecordedFuture.File.relatedEntities.RelatedTarget.name — Recorded Future Related Target Name
• RecordedFuture.File.relatedEntities.RelatedTarget.type — Recorded Future Related Target Type
• RecordedFuture.File.relatedEntities.RelatedThreatActor.count — Recorded Future Related Threat Actor Count
• RecordedFuture.File.relatedEntities.RelatedThreatActor.id — Recorded Future Related Threat Actor ID
• RecordedFuture.File.relatedEntities.RelatedThreatActor.name — Recorded Future Related Threat Actor Name
• RecordedFuture.File.relatedEntities.RelatedThreatActor.type — Recorded Future Related Threat Actor Type
• RecordedFuture.File.relatedEntities.RelatedMalware.count — Recorded Future Related Malware Count
• RecordedFuture.File.relatedEntities.RelatedMalware.id — Recorded Future Related Malware ID
• RecordedFuture.File.relatedEntities.RelatedMalware.name — Recorded Future Related Malware Name
• RecordedFuture.File.relatedEntities.RelatedMalware.type — Recorded Future Related Malware Type
• RecordedFuture.File.relatedEntities.RelatedCyberVulnerability.count — Recorded Future Related Vulnerability Count
• RecordedFuture.File.relatedEntities.RelatedCyberVulnerability.id — Recorded Future Related Vulnerability ID
• RecordedFuture.File.relatedEntities.RelatedCyberVulnerability.name — Recorded Future Related Vulnerability Name
• RecordedFuture.File.relatedEntities.RelatedCyberVulnerability.type — Recorded Future Related Vulnerability Type
• RecordedFuture.File.relatedEntities.RelatedIpAddress.count — Recorded Future Related IP Address Count
• RecordedFuture.File.relatedEntities.RelatedIpAddress.id — Recorded Future Related IP Address ID
• RecordedFuture.File.relatedEntities.RelatedIpAddress.name — Recorded Future Related IP Address Name
• RecordedFuture.File.relatedEntities.RelatedIpAddress.type — Recorded Future Related IP Address Type
• RecordedFuture.File.relatedEntities.RelatedInternetDomainName.count — Recorded Future Related Domain Name Count
• RecordedFuture.File.relatedEntities.RelatedInternetDomainName.id — Recorded Future Related Domain Name ID
• RecordedFuture.File.relatedEntities.RelatedInternetDomainName.name — Recorded Future Related Domain Name Name
• RecordedFuture.File.relatedEntities.RelatedInternetDomainName.type — Recorded Future Related Domain Name Type
• RecordedFuture.File.relatedEntities.RelatedProduct.count — Recorded Future Related Product Count
• RecordedFuture.File.relatedEntities.RelatedProduct.id — Recorded Future Related Product ID
• RecordedFuture.File.relatedEntities.RelatedProduct.name — Recorded Future Related Product Name
• RecordedFuture.File.relatedEntities.RelatedProduct.type — Recorded Future Related Product Type
• RecordedFuture.File.relatedEntities.RelatedCountries.count — Recorded Future Related Countries Count
• RecordedFuture.File.relatedEntities.RelatedCountries.id — Recorded Future Related Countries IDs
• RecordedFuture.File.relatedEntities.RelatedCountries.name — Recorded Future Related Countries Names
• RecordedFuture.File.relatedEntities.RelatedCountries.type — Recorded Future Related Countries Type
• RecordedFuture.File.relatedEntities.RelatedHash.count — Recorded Future Related Hash Count
• RecordedFuture.File.relatedEntities.RelatedHash.id — Recorded Future Related Hash ID
• RecordedFuture.File.relatedEntities.RelatedHash.name — Recorded Future Related Hash Name
• RecordedFuture.File.relatedEntities.RelatedHash.type — Recorded Future Related Hash Type
• RecordedFuture.File.relatedEntities.RelatedTechnology.count — Recorded Future Related Technology Count
• RecordedFuture.File.relatedEntities.RelatedTechnology.id — Recorded Future Related Technology ID
• RecordedFuture.File.relatedEntities.RelatedTechnology.name — Recorded Future Related Technology Name
• RecordedFuture.File.relatedEntities.RelatedTechnology.type — Recorded Future Related Technology Type
• RecordedFuture.File.relatedEntities.RelatedEmailAddress.count — Recorded Future Related Email Address Count
• RecordedFuture.File.relatedEntities.RelatedEmailAddress.id — Recorded Future Related Email Address ID
• RecordedFuture.File.relatedEntities.RelatedEmailAddress.name — Recorded Future Related Email Address Name
• RecordedFuture.File.relatedEntities.RelatedEmailAddress.type — Recorded Future Related Email Address Type
• RecordedFuture.File.relatedEntities.RelatedAttackVector.count — Recorded Future Related Attack Vector Count
• RecordedFuture.File.relatedEntities.RelatedAttackVector.id — Recorded Future Related Attack Vector ID
• RecordedFuture.File.relatedEntities.RelatedAttackVector.name — Recorded Future Related Attack Vector Name
• RecordedFuture.File.relatedEntities.RelatedAttackVector.type — Recorded Future Related Attack Vector Type
• RecordedFuture.File.relatedEntities.RelatedMalwareCategory.count — Recorded Future Related Malware Category Count
• RecordedFuture.File.relatedEntities.RelatedMalwareCategory.id — Recorded Future Related Malware Category ID
• RecordedFuture.File.relatedEntities.RelatedMalwareCategory.name — Recorded Future Related Malware Category Name
• RecordedFuture.File.relatedEntities.RelatedMalwareCategory.type — Recorded Future Related Malware Category Type
• RecordedFuture.File.relatedEntities.RelatedOperations.count — Recorded Future Related Operations Count
• RecordedFuture.File.relatedEntities.RelatedOperations.id — Recorded Future Related Operations ID
• RecordedFuture.File.relatedEntities.RelatedOperations.name — Recorded Future Related Operations Name
• RecordedFuture.File.relatedEntities.RelatedOperations.type — Recorded Future Related Operations Type
• RecordedFuture.File.relatedEntities.RelatedCompany.count — Recorded Future Related Company Count
• RecordedFuture.File.relatedEntities.RelatedCompany.id — Recorded Future Related Company ID
• RecordedFuture.File.relatedEntities.RelatedCompany.name — Recorded Future Related Company Name
• RecordedFuture.File.relatedEntities.RelatedCompany.type — Recorded Future Related Company Type

Commands used

• recordedfuture-intelligence
• setIndicator