Intezer - Analyze by hash

Analyze the given file hash on Intezer Analyze and enrich the file reputation. Supports SHA256, SHA1, and MD5.

Intezer · 8 tasks · 3 inputs · 14 outputs

Inputs

  • Interval — How often the polling command should run (in minutes).
  • Timeout — Amount of time to wait before a timeout occurs (in minutes).
  • hash

Outputs

  • File.SHA256 — SHA256 hash of the file.
  • File.Malicious — The file malicious description.
  • File.Type — File type, for example: "PE".
  • File.Size — File size.
  • File.MD5 — MD5 hash of the file.
  • File.Name — File name.
  • File.SHA1 — SHA1 hash of the file.
  • File — The file object.
  • File.Malicious.Vendor — For malicious files, the vendor that made the decision.
  • DBotScore — The DBotScore object.
  • DBotScore.Indicator — The indicator that was tested.
  • DBotScore.Type — The indicator type.
  • DBotScore.Vendor — Vendor used to calculate the score.
  • DBotScore.Score — The actual score.

Commands used

intezer-analyze-by-hash intezer-get-analysis-result

Flowchart

yes yes yes Start Start Is Intezer enabled Is Intezer enabled Done Done Intezer - Analyze File by hash - intezer-analyze-by-hash Intezer - Analyze File by... intezer-analyze-by-hash Is there a hash to analyze? Is there a hash to analyze? GenericPolling - GenericPolling GenericPolling GenericPolling Intezer - get analysis result - intezer-get-analysis-result Intezer - get analysis re... intezer-get-analysis-result Was result returned? Was result returned?