A1000FinalClassification
Calculates A1000 final classification based on A1000 classification and A1000 full reports.
python · ReversingLabs A1000
Details
| ID | A1000FinalClassification |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
README
Calculates A1000 final classification based on A1000 classification and A1000 full reports.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Cortex XSOAR Version | 6.0.0 |
Inputs
| Argument Name | Description |
|---|---|
| a1000_classification_report | A1000 classification report |
| a1000_full_report | A1000 full report |
Outputs
| Path | Description | Type |
|---|---|---|
| File.SHA256 | The SHA256 hash of the file. | String |
| File.SHA1 | The SHA1 hash of the file. | String |
| File.SHA512 | The SHA512 hash of the file. | String |
| File.Name | The name of the file. | String |
| File.EntryID | The Entry ID. | String |
| File.Info | Information about the file. | String |
| File.Type | The type of the file. | String |
| File.MD5 | MD5 hash of the file. | String |
| DBotScore.Score | The actual score. | Number |
| DBotScore.Type | The indicator type. | String |
| DBotScore.Indicator | The indicator that was tested. | String |
| DBotScore.Vendor | The vendor used to calculate the score. | String |
args: - description: A1000 classification report. name: a1000_classification_report required: true - description: A1000 full report. name: a1000_full_report required: true comment: Calculates A1000 final classification based on A1000 classification and A1000 full reports. commonfields: id: A1000FinalClassification version: -1 enabled: true name: A1000FinalClassification outputs: - contextPath: File.SHA256 description: The SHA256 hash of the file. type: String - contextPath: File.SHA1 description: The SHA1 hash of the file. type: String - contextPath: File.SHA512 description: The SHA512 hash of the file. type: String - contextPath: File.Name description: The name of the file. type: String - contextPath: File.EntryID description: The Entry ID. type: String - contextPath: File.Info description: Information about the file. type: String - contextPath: File.Type description: The type of the file. type: String - contextPath: File.MD5 description: MD5 hash of the file. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String script: '-' subtype: python3 timeout: '0' type: python dockerimage: demisto/python3:3.12.13.10116658 runas: DBotWeakRole tests: - No tests (auto formatted) fromversion: 6.0.0