Detonate URL - FireEye AX

Detonating URL with FireEye AX.

FireEye (AX Series) · 9 tasks · 4 inputs · 6 outputs

Inputs

  • URL — URL to detonate
  • interval — How often to poll for results.
  • timeout — How long to wait before giving up waiting for results.
  • Info_Level — This parameter specifies the level of information to be returned in the URL submission report. Information levels include concise (default), normal, or extended.

Outputs

  • FireEyeAX.Submissions.URL.Key — The submission key.
  • FireEyeAX.Submissions.Severity — The severity level of the file.
  • FireEyeAX.Submissions.InfoLevel — The info level of the report.
  • DBotScore.Score — The actual score.
  • DBotScore.Indicator — The indicator that was tested.
  • DBotScore.Vendor — Vendor used to calculate the score.

Commands used

fe-submit-url fe-submit-url-result fe-submit-url-status

Flowchart

true true Start Start Is there an active FireEye AX instance? Is there an active FireEy... Is there a URL? Is there a URL? Send URL to FireEye AX sandbox - fe-submit-url Send URL to FireEye AX sa... fe-submit-url GenericPolling - GenericPolling GenericPolling GenericPolling Done Done Get task report - fe-submit-url-result Get task report fe-submit-url-result Sleep (let the sandbox create the task) - Sleep Sleep (let the sandbox cr... Sleep View task - fe-submit-url-status View task fe-submit-url-status