AnalyzeOSX

Get file and url reputation for osxcollector result. will use VirusTotal for Url checks, and IBM XForce for MD5 checks. maxchecks : for system : system name to run agent on. section : the type check that OSXCollector should run.

javascript · OSX Collector

Details

IDAnalyzeOSX
Languagejavascript
From Version5.0.0
Tagsosx

README

Uses this script to get file and URL reputation for osxcollector result.

This script will use VirusTotal for URL checks, and IBM XForce for MD5 file hash checks.

  • maxchecks : for.
  • system : system name to run agent on.
  • section : the type check that OSXCollector should run.

Script Data


Name Description
Script Type javascript
Tags osx

Dependencies


This script uses the following commands and scripts.

  • url
  • file

Inputs


Argument Name Description
section Asks OSXCollector for a specific section.
timeout The timeout to be passed to the OSXCollector script.
maxchecks The maximum amount of files/URLs to verify.
system THe OSX system to be used.

Outputs


There are no outputs for this script.

commonfields:
  id: AnalyzeOSX
  version: -1
name: AnalyzeOSX
script: ''
type: javascript
tags:
- osx
comment: "Get file and url reputation for osxcollector result.\n will use VirusTotal\
  \ for Url checks, and IBM XForce for MD5 checks.\n maxchecks : for \n system  :\
  \ system name to run agent on.\n section : the type check that OSXCollector should\
  \ run."
system: true
args:
- name: section
  default: true
  description: Ask OSXCollector for a specific section
- name: timeout
  description: Timeout to be passed to OSXCollector script
- name: maxchecks
  description: Maximum amount of files/urls to verify
- name: system
  description: OSX System to be used
scripttarget: 0
dependson:
  must:
  - file
  - url
timeout: 0s
tests:
- No test - need to revisit
fromversion: 5.0.0