Hunt Extracted Hashes V2

This playbook extracts IOCs from the incident details and attached files using regular expressions and then hunts for hashes on endpoints in the organization using available tools. The playbook supports multiple types of attachments. For the full supported attachments list, refer to "Extract Indicators From File - Generic v2".

Hunting · 7 tasks · 1 input · 0 outputs

Inputs

  • File — The file from which to extract indicators.

Commands used

extractIndicators

Flowchart

Start Start Extract Indicators From File - Generic v2 - Extract Indicators From File - Generic v2 Extract Indicators From F... Extract Indicators From File ... Extract Indicator Extract Indicator Extract indicators from incident details - extractIndicators Extract indicators from i... extractIndicators Hunt Hunt Done Done Search Endpoints By Hash - Generic V2 - Search Endpoints By Hash - Generic V2 Search Endpoints By Hash ... Search Endpoints By Hash - Ge...