Search Endpoints By Hash - Cybereason

Hunt for endpoint activity involving hash, using Cybereason.

Cybereason · 9 tasks · 2 inputs · 1 output

Inputs

  • MD5Hash — MD5 Hash
  • SHA1Hash — SHA1 Hash

Outputs

  • Cybereason.File.Hostname — Device hostname

Commands used

cybereason-query-file

Flowchart

true true true Start Start Are there MD5s to hunt? Are there MD5s to hunt? Are there SHA1s to hunt? Are there SHA1s to hunt? Hunt for devices running MD5 - cybereason-query-file Hunt for devices running MD5 cybereason-query-file Done Done Is Cybereason integration enabled? Is Cybereason integration... Hunt for indicators Hunt for indicators No Integration \ No Hash No Integration \ No Hash Hunt for devices running SHA1 - cybereason-query-file Hunt for devices running ... cybereason-query-file