Malware Investigation - Generic - Setup Deprecated Hidden

Deprecated. Verify file sample and hostname information for the "Malware Investigation - Generic" playbook. If the file sample or hostname are missing, the playbook will attempt to retrieve them using one or more integrations

Deprecated Content (Deprecated) · 17 tasks · 6 inputs · 3 outputs

Inputs

  • File — Malware sample to investigation
  • MD5 — MD5 to investigation
  • SHA1 — SHA1 to investigation
  • SHA256 — SHA256 to investigation
  • Hostname — Hostname to investigation
  • Path — File path to get sample from

Outputs

  • Endpoint — The endpoint
  • Endpoint.Hostname — Device hostname
  • File — File sample object

Flowchart

yes yes yes yes Start Start Validate file sample Validate file sample Do we have a file sample? Do we have a file sample? Done Done Get File Sample By Hash - Generic - Get File Sample By Hash - Generic Get File Sample By Hash -... Get File Sample By Hash - Gen... Did we get a file sample? Did we get a file sample? File sample is missing File sample is missing Manually upload file sample Manually upload file sample Try to get file sample Try to get file sample Get File Sample From Path - Generic - Get File Sample From Path - Generic Get File Sample From Path... Get File Sample From Path - G... Validate endpoint Validate endpoint Do we have a Hostname? Do we have a Hostname? Search Endpoints By Hash - Generic - Search Endpoints By Hash - Generic Search Endpoints By Hash ... Search Endpoints By Hash - Ge... Did we get a Hostname? Did we get a Hostname? Hostname is missing Hostname is missing Manually enter a Hostname - Set Manually enter a Hostname Set Check file sample results Check file sample results