Recorded Future Sandbox

Template playbook utilizing Hatching.io to sandbox a given file and generate an analysis report. Indicators from the given report are then extracted and enriched with Recorded Future data.

Pack

RecordedFuture

Tasks

26

Inputs

• File

Outputs

• DBotScore — The DBotScore object.
• DBotScore.Indicator — Triage analysis target
• DBotScore.Type — The indicator type - File or URL
• DBotScore.Vendor — The integration used to generate the indicator
• DBotScore.Score — Analysis verdict as score from 1 to 10

Commands used

• domain
• extractIndicators
• ip
• recordedfuture-malware-search
• triage-get-report-triage
• triage-get-sample-summary
• triage-get-static-report
• triage-submit-sample
• url