Get File Sample From Path - Generic V2 Deprecated

Deprecated. Use `Get File Sample From Path - Generic V3` instead. This playbook returns a file sample correlating to a path into the War Room using the following sub-playbooks: inputs: 1) Get File Sample From Path - D2. 2) Get File Sample From Path - VMware Carbon Black EDR (Live Response API).

Common Playbooks · 6 tasks · 4 inputs · 11 outputs

Inputs

  • UseD2 — Determines whether a D2 agent will be used to retrieve the file. Options: no (default) yes
  • Hostname — Hostname of the machine on which the file is located.
  • Path — The path of the file to retrieve. For example: C:\users\folder\file.txt
  • Agent_ID — The ID of the agent, or of the endpoint, in the relevant integration (such as EDR).

Outputs

  • File.Size — The size of the file.
  • File.Type — The type of the file.
  • File.Info — General information of the file.
  • File.MD5 — The MD5 hash of the file.
  • File.SHA1 — The SHA1 hash of the file.
  • File.SHA256 — The SHA256 hash of the file.
  • File.SHA512 — The SHA512 hash of the file.
  • File.EntryID — The file entry ID.
  • File.Extension — The file extension.
  • File.Name — The file name.
  • File.SSDeep — File SSDeep.

Flowchart

yes Start Start Use D2 agent? Use D2 agent? Done Done Get File Sample From Path - D2 - Get File Sample From Path - D2 Get File Sample From Path... Get File Sample From Path - D2 Use VMware Carbon Black EDR (Live Response API) Use VMware Carbon Black E... Get File Sample From Path - VMware Carbon Black EDR - Live Response API - Get File Sample From Path - VMware Carbon Black EDR - Live Response API Get File Sample From Path... Get File Sample From Path - V...