Hybrid-analysis quick-scan Deprecated

Deprecated. No available replacement.

Hybrid Analysis (Deprecated) · 5 tasks · 3 inputs · 1 output

Details

ID	`Hybrid-analysis quick-scan`
From Version	5.0.0
Tasks	5

README

Deprecated. No available replacement.

Runs a quick-scan command with Generic-Polling.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

GenericPolling

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

hybrid-analysis-quick-scan-url-results
hybrid-analysis-quick-scan-url

Playbook Inputs

Name	Description	Default Value	Required
url	The website URL, or the URL that contains the file to submit.	-	Optional
scan_type	The type of scan. Run the `hybrid-analysis-list-scanners` command to view available scanners.	all	Optional
min_malicious_scanners	The number of scanners that report the file as malicious to determine whether the file is malicious. The default is “2”.	2	Optional

Playbook Outputs

Path	Description	Type
HybridAnalysis.URL.SubmissionType	The type of the submission. Can be, “file” or “url”.	unknown

Playbook Image

Hybrid-analysis_quick-scan

Inputs

url — The website URL, or the URL that contains the file to submit.
scan_type — The type of scan. Run the hybrid-analysis-list-scanners command to view available scanners.
min_malicious_scanners — The number of scanners that report the file as malicious to determine whether the file is malicious. Default is "2".

Outputs

HybridAnalysis.URL.SubmissionType — The type of the submission - file or url

Commands used

hybrid-analysis-quick-scan-url hybrid-analysis-quick-scan-url-results

Flowchart

Source

playbook-Hybrid-analysis_quick-scan.yml

Download History Raw

id: Hybrid-analysis quick-scan
version: -1
fromversion: 5.0.0
name: Hybrid-analysis quick-scan
description: Deprecated. No available replacement.
starttaskid: "0"
tasks:
  "0":
    id: "0"
    taskid: b423ee2f-8cf3-4d22-8e68-a83d5310a181
    type: start
    task:
      id: b423ee2f-8cf3-4d22-8e68-a83d5310a181
      version: -1
      name: ""
      description: ""
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "2"
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 50
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "1":
    id: "1"
    taskid: c331db18-b495-4259-8a42-3bd8b339d196
    type: playbook
    task:
      id: c331db18-b495-4259-8a42-3bd8b339d196
      version: -1
      name: GenericPolling
      description: ""
      playbookName: GenericPolling
      type: playbook
      iscommand: false
      brand: ""
    nexttasks:
      '#none#':
      - "3"
    scriptarguments:
      AdditionalPollingCommandArgNames:
        simple: 'min_malicious_scanners'
      AdditionalPollingCommandArgValues:
        simple: ${inputs.min_malicious_scanners}
      Ids:
        simple: ${HybridAnalysis.URL.ScanID}
      Interval:
        simple: "1"
      PollingCommandArgName:
        simple: scanID
      PollingCommandName:
        simple: hybrid-analysis-quick-scan-url-results
      Timeout:
        simple: "10"
      dt:
        simple: HybridAnalysis.URL(val.Finished != true).ScanID
    separatecontext: true
    loop:
      iscommand: false
      exitCondition: ""
      wait: 1
    view: |-
      {
        "position": {
          "x": 50,
          "y": 370
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "2":
    id: "2"
    taskid: 646ceb09-7cbb-45ea-8a0b-69f26bf41040
    type: regular
    task:
      id: 646ceb09-7cbb-45ea-8a0b-69f26bf41040
      version: -1
      name: Run quick-scan command
      description: Submits the URL of a website, or the URL that contains the file, for analysis.
      script: '|||hybrid-analysis-quick-scan-url'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "1"
    scriptarguments:
      scan_type:
        simple: ${inputs.scan_type}
      url:
        simple: ${inputs.url}
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 195
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "3":
    id: "3"
    taskid: 54affafa-cdf2-4bc3-8b97-60ef9ad06ef9
    type: regular
    task:
      id: 54affafa-cdf2-4bc3-8b97-60ef9ad06ef9
      version: -1
      name: Get quick-scan results
      description: Returns the scan results of the given URL ID.
      script: '|||hybrid-analysis-quick-scan-url-results'
      type: regular
      iscommand: true
      brand: ""
    nexttasks:
      '#none#':
      - "4"
    scriptarguments:
      ID:
        simple: ${HybridAnalysis.URL.ID}
      min_malicious_scanners:
        simple: ${inputs.min_malicious_scanners}
      scanID:
        simple: ${HybridAnalysis.URL.ScanID}
    reputationcalc: 1
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 545
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
  "4":
    id: "4"
    taskid: bfc75b23-0f21-46dc-8672-aed9a2bf8397
    type: title
    task:
      id: bfc75b23-0f21-46dc-8672-aed9a2bf8397
      version: -1
      name: Done
      description: ""
      type: title
      iscommand: false
      brand: ""
    separatecontext: false
    view: |-
      {
        "position": {
          "x": 50,
          "y": 720
        }
      }
    note: false
    timertriggers: []
    ignoreworker: false
view: |-
  {
    "linkLabelsPosition": {},
    "paper": {
      "dimensions": {
        "height": 735,
        "width": 380,
        "x": 50,
        "y": 50
      }
    }
  }
inputs:
- key: url
  value: {}
  required: false
  description: The website URL, or the URL that contains the file to submit.
- key: scan_type
  value:
    simple: all
  required: false
  description: The type of scan. Run the hybrid-analysis-list-scanners command to view available scanners.
- key: min_malicious_scanners
  value:
    simple: "2"
  required: false
  description: The number of scanners that report the file as malicious to determine whether the file is malicious. Default is "2".
outputs:
- contextPath: HybridAnalysis.URL.SubmissionType
  description: The type of the submission - file or url
tests:
- No tests (deprecated)
deprecated: true