WildFire - Detonate file Deprecated

Deprecated. Use WildFire - Detonate file v2 instead.

WildFire by Palo Alto Networks · 11 tasks · 4 inputs · 27 outputs

Inputs

  • File — File object of the file to detonate. The file is taken from the context.
  • Interval — The duration for executing the polling (in minutes).
  • Timeout — The duration after which to stop polling and to resume the playbook. (in minutes)
  • ReportFileType — The resource type to download.

Outputs

  • DBotScore.Score — The actual score.
  • DBotScore.Type — The type of the indicator.
  • File.Type — The file type, e.g. "PE".
  • File.Size — The file size.
  • File.MD5 — The MD5 hash of the file.
  • File.Name — The filename.
  • File.SHA1 — The SHA1 hash of the file.
  • File — The file object.
  • File.SHA256 — TheSHA256 hash of the file.
  • File.Malicious — The malicious object.
  • File.Malicious.Vendor — The vendor that made the decision that the file is malicious.
  • DBotScore — The DBot object.
  • DBotScore.Indicator — The indicator that was tested.
  • DBotScore.Vendor — The vendor used to calculate the score.
  • WildFire.Report — The submission object.
  • WildFire.Report.Status — The status of the submission.
  • WildFire.Report.SHA256 — The SHA256 hash of the submission.
  • InfoFile — The report file object.
  • InfoFile.EntryID — The EntryID of the report file.
  • InfoFile.Extension — The extension of the report file.
  • InfoFile.Name — The name of the report file.
  • InfoFile.Info — The info of the report file.
  • InfoFile.Size — The size of the report file.
  • InfoFile.Type — The type of the report file.
  • WildFire.Report.MD5 — The MD5 hash of the submission.
  • WildFire.Report.FileType — The type of the submission.
  • WildFire.Report.Size — The size of the submission.

Commands used

wildfire-report wildfire-upload

Flowchart

yes yes yes Start Start GenericPolling - GenericPolling GenericPolling GenericPolling WildFire Get Report - wildfire-report WildFire Get Report wildfire-report Done Done Is WildFire sandbox enabled? Is WildFire sandbox enabled? Filter only supported files Filter only supported files WildFire Upload File - wildfire-upload WildFire Upload File wildfire-upload Did the upload finish successfully? Did the upload finish suc... Set ASCII file types - SetAndHandleEmpty Set ASCII file types SetAndHandleEmpty Set Non ASCII file types - SetAndHandleEmpty Set Non ASCII file types SetAndHandleEmpty Are there any supported files to detonate? Are there any supported f...