Enrich McAfee DXL using 3rd party sandbox Deprecated Hidden

Deprecated. Use "Enrich McAfee DXL using 3rd party sandbox v2" playbook instead. Example of bridging DXL to a third party sandbox. Detonate a file in Wildfire and if malicious - push its MD5, SHA1 and SHA256 hashes to McAfee DXL.

Deprecated Content (Deprecated) · 5 tasks · 0 inputs · 0 outputs

Commands used

dxl-send-event

Flowchart

yes Start Start Any malicious files detected? - Exists Any malicious files detec... Exists Close incident - CloseInvestigation Close incident CloseInvestigation DXL - Push file hashes as malicious - dxl-send-event DXL - Push file hashes as... dxl-send-event 7 - WildFire - Detonate file 7 WildFire - Detonate file