Block File - Cybereason

This playbook accepts an MD5 hash and blocks the file using the Cybereason integration.

Cybereason · 5 tasks · 1 input · 3 outputs

Inputs

  • MD5 — The MD5 hash of the file to block.

Outputs

  • CbResponse.BlockedHashes.LastBlock.Time — Last block time.
  • CbResponse.BlockedHashes.LastBlock.Hostname — Last block hostname.
  • CbResponse.BlockedHashes.LastBlock.CbSensorID — Last block sensor ID.

Commands used

cybereason-prevent-file

Flowchart

true true Start Start Is Cybereason integration enabled? Is Cybereason integration... Is there an MD5 to block? Is there an MD5 to block? Done Done Cybereason Prevent File - cybereason-prevent-file Cybereason Prevent File cybereason-prevent-file