Convert file hash to corresponding hashes
The playbook enables you to get all of the corresponding file hashes for a file even if there is only one hash type available. For example, if we have only the SHA256 hash, the playbook will get the SHA1 and MD5 hashes as long as the original searched hash is recognized by any our the threat intelligence integrations.
Common Playbooks · 20 tasks · 3 inputs · 4 outputs
Inputs
SHA256— The SHA256 hash on which to search.SHA1— The SHA1 hash on which to search.MD5— The MD5 hash on which to search.
Outputs
File.SHA256— Output for detected SHA256 hash.File.SHA1— Output for detected SHA1 hash.File.MD5— Output for detected MD5 hash.Indicators.Value— Output for detected hashes.
Commands used
enrichIndicators
file