Retrieve File from Endpoint - Generic V3

'This playbook retrieves a file sample from an endpoint using the following playbooks:' - Get File Sample From Path - Generic v2. - Get File Sample By Hash - Generic v3.

Common Playbooks · 4 tasks · 5 inputs · 11 outputs

Inputs

MD5 — The MD5 hash value for the file to retrieve.
SHA256 — The SHA256 hash value for the file to retrieve.
Host — Hostname of the machine on which the file is located for PS remote it can also be an IP address.
Path — The path of the file to retrieve. For example: C:\users\folder\file.txt
Agent_ID — The ID of the agent in the relevant integration (such as EDR).

Outputs

File.Size — The size of the file.
File.Type — The type of the file.
File.Info — General information of the file.
File.MD5 — The MD5 hash of the file.
File.SHA1 — The SHA1 hash of the file.
File.SHA256 — The SHA256 hash of the file.
File.SHA512 — The SHA512 hash of the file.
File.EntryID — File entry ID.
File.Extension — The file extension.
File.Name — The file name.
File.SSDeep — The file SSDeep.

Flowchart