Malcore alert related file

This playbook fetch a malcore alert from a GCenter, retrieve the associated suspicious file and checks the SHA256 reputation using VirusTotal integration.

Gatewatcher AionIQ · 3 tasks · 0 inputs · 0 outputs

Commands used

gcenter103-alerts-list gcenter103-raw-alerts-file-get

Flowchart

Start Start get a Malcore alert - gcenter103-alerts-list get a Malcore alert gcenter103-alerts-list get a Malcore alert related file - gcenter103-raw-alerts-file-get get a Malcore alert relat... gcenter103-raw-alerts-file-get