Retrieve File from Endpoint - Generic V2 Deprecated

Deprecated. Use `Retrieve File from Endpoint - Generic V3` instead. 'This playbook retrieves a file sample from an endpoint using the following playbooks:' - Get File Sample From Path - Generic v2. - Get File Sample By Hash - Generic v3.

Common Playbooks · 4 tasks · 6 inputs · 11 outputs

Inputs

  • MD5 — The MD5 hash value for the file to retrieve.
  • SHA256 — The SHA256 hash value for the file to retrieve.
  • Hostname — Hostname of the machine on which the file is located.
  • Path — The path of the file to retrieve. For example: C:\users\folder\file.txt
  • UseD2 — Determines whether a D2 agent will be used to retrieve the file. Options: no (default) yes
  • Agent_ID — The ID of the agent in the relevant integration (such as EDR).

Outputs

  • File.Size — The size of the file.
  • File.Type — The type of the file.
  • File.Info — General information of the file.
  • File.MD5 — The MD5 hash of the file.
  • File.SHA1 — The SHA1 hash of the file.
  • File.SHA256 — The SHA256 hash of the file.
  • File.SHA512 — The SHA512 hash of the file.
  • File.EntryID — File entry ID.
  • File.Extension — The file extension.
  • File.Name — The file name.
  • File.SSDeep — The file SSDeep.

Flowchart

Start Start Done Done Get File Sample By Hash - Generic v3 - Get File Sample By Hash - Generic v3 Get File Sample By Hash -... Get File Sample By Hash - Gen... Get File Sample From Path - Generic V2 - Get File Sample From Path - Generic V2 Get File Sample From Path... Get File Sample From Path - G...