File Enrichment - File reputation

Get file reputation using one or more integrations

Pack

CommonPlaybooks

Tasks

9

Inputs

• MD5 — File MD5 hash to enrich.
• SHA256 — File SHA-256 hash to enrich.
• SHA1 — File SHA-1 hash to enrich.

Outputs

• File — The file's object
• File.MD5 — MD5 hash of the file
• File.SHA1 — SHA1 hash of the file
• File.SHA256 — SHA256 hash of the file
• File.Malicious.Vendor — For malicious files, the vendor that made the decision
• DBotScore — The DBotScore's object
• DBotScore.Indicator — The tested indicator
• DBotScore.Type — The type of the indicator
• DBotScore.Vendor — Vendor used to calculate the score
• DBotScore.Score — The actual score