Retrieve File from Endpoint - Generic V3

'This playbook retrieves a file sample from an endpoint using the following playbooks:' - Get File Sample From Path - Generic v2. - Get File Sample By Hash - Generic v3.

Pack

CommonPlaybooks

Tasks

4

Inputs

• MD5 — The MD5 hash value for the file to retrieve.
• SHA256 — The SHA256 hash value for the file to retrieve.
• Host — Hostname of the machine on which the file is located for PS remote it can also be an IP address.
• Path — The path of the file to retrieve. For example: C:\users\folder\file.txt
• Agent_ID — The ID of the agent in the relevant integration (such as EDR).

Outputs

• File.Size — The size of the file.
• File.Type — The type of the file.
• File.Info — General information of the file.
• File.MD5 — The MD5 hash of the file.
• File.SHA1 — The SHA1 hash of the file.
• File.SHA256 — The SHA256 hash of the file.
• File.SHA512 — The SHA512 hash of the file.
• File.EntryID — File entry ID.
• File.Extension — The file extension.
• File.Name — The file name.
• File.SSDeep — The file SSDeep.