Enrich DXL with ATD verdict Deprecated Hidden

Deprecated. Use "Enrich DXL with ATD verdict v2" playbook instead. Example of using McAfee ATD and pushing any malicious verdicts over DXL. Detonates a file in ATD and if malicious - push its MD5, SHA1 and SHA256 hashes to McAfee DXL.

Deprecated Content (Deprecated) · 5 tasks · 0 inputs · 0 outputs

Commands used

dxl-send-event

Flowchart

yes Start Start Any malicious files detected? - Exists Any malicious files detec... Exists Close incident - CloseInvestigation Close incident CloseInvestigation 5 - ATD - Detonate File 5 ATD - Detonate File DXL - Push file hashes as malicious - dxl-send-event DXL - Push file hashes as... dxl-send-event