Extract Indicators - Generic Deprecated Hidden

Deprecated. We recommend using extractIndicators command instead. Extract indicators from input data.

Deprecated Content (Deprecated) · 7 tasks · 1 input · 7 outputs

Inputs

  • incident

Outputs

  • File.MD5 — Extracted MD5
  • File.SHA1 — Extracted SHA1
  • File.SHA256 — Extracted SHA256
  • URL.Data — Extracted URLs
  • IP.Address — Extracted IPs
  • Domain.Name — Extracted domains
  • Account.Email.Address — Extracted emails

Flowchart

Start Start Collect Hashes from Incident - ExtractHash Collect Hashes from Incident ExtractHash Collect URLs from Incident - ExtractURL Collect URLs from Incident ExtractURL Collect IPs from Incident - ExtractIP Collect IPs from Incident ExtractIP Done Done Collect Domains from Incident - ExtractDomain Collect Domains from Inci... ExtractDomain Collect Email Addresses from Incident - ExtractEmail Collect Email Addresses f... ExtractEmail