File Enrichment - File reputation

Get file reputation using one or more integrations

Common Playbooks · 9 tasks · 3 inputs · 10 outputs

Inputs

  • MD5 — File MD5 hash to enrich.
  • SHA256 — File SHA-256 hash to enrich.
  • SHA1 — File SHA-1 hash to enrich.

Outputs

  • File — The file's object
  • File.MD5 — MD5 hash of the file
  • File.SHA1 — SHA1 hash of the file
  • File.SHA256 — SHA256 hash of the file
  • File.Malicious.Vendor — For malicious files, the vendor that made the decision
  • DBotScore — The DBotScore's object
  • DBotScore.Indicator — The tested indicator
  • DBotScore.Type — The type of the indicator
  • DBotScore.Vendor — Vendor used to calculate the score
  • DBotScore.Score — The actual score

Flowchart

yes yes yes Start Start Get file hash reputation Get file hash reputation Get MD5 reputation - FileReputation Get MD5 reputation FileReputation Done Done Is there an MD5 hash? Is there an MD5 hash? Is there a SHA-256 hash? Is there a SHA-256 hash? Get SHA-256 reputation - FileReputation Get SHA-256 reputation FileReputation Is there a SHA-1 hash? Is there a SHA-1 hash? Get SHA-1 reputation - FileReputation Get SHA-1 reputation FileReputation