Detonate URL - ThreatGrid v2

Detonate one or more URLs using the ThreatGrid integration.

Cisco Secure Malware Analytics · 5 tasks · 3 inputs · 9 outputs

Inputs

  • URL — URL of the sites to detonate.
  • timeout — Indicates the time in seconds until the polling sequence times out. Default is 60.
  • interval — Indicates the time in seconds to wait between command execution when 'polling' argument is true. Minimum value is 10 seconds. Default is 10.

Outputs

  • ThreatGrid.Sample.id — The sample id
  • ThreatGrid.Sample.filename — The sample filename
  • ThreatGrid.Sample.state — The state of the sample, one of a stable set of strings "wait, prep, run, proc, succ, fail"
  • ThreatGrid.Sample.status — The sample status
  • ThreatGrid.Sample.md5 — The sample md5
  • ThreatGrid.Sample.sha1 — The sample sha1
  • ThreatGrid.Sample.sha256 — The sample sha256
  • ThreatGrid.Sample.os — The sample os
  • ThreatGrid.Sample.submitted_at — The sample submission time

Commands used

threat-grid-sample-upload

Flowchart

yes yes Start Start ThreatGrid Upload URL - threat-grid-sample-upload ThreatGrid Upload URL threat-grid-sample-upload Is ThreatGrid enabled? Is ThreatGrid enabled? Done Done Is there a URL to detonate? Is there a URL to detonate?