Get File Sample By Hash - Cylance Protect v2

This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration.

Cylance Protect · 5 tasks · 2 inputs · 6 outputs

Inputs

  • SHA256 — SHA256 hash of the file.
  • unzip — Specifies whether the downloaded file will be unzipped. The command default is 'no'. Yes - unzip automatically No - will not unzip

Outputs

  • File.SHA256 — SHA256 hash of the file.
  • File.Name — File name.
  • File.Size — File size.
  • File.Safelisted — Whether the file is on the safe list.
  • File.Timestamp — Timestamp.
  • File.MD5 — MD5 hash of the file.

Commands used

cylance-protect-download-threat

Flowchart

yes yes Start Start Is Cylance Protect v2 enabled? Is Cylance Protect v2 ena... Done Done Is there a file to download? Is there a file to download? Cylance Protect - download threat - cylance-protect-download-threat Cylance Protect - downloa... cylance-protect-download-threat