Etl2Pcap

Receives an ETL file and converts it to a PCAP file.

python · Windows Forensics

Details

IDEtl2Pcap
Languagepython
From Version6.0.0
Docker Imagedemisto/etl2pcap:1.0.0.10133006

README

Receives an ETL file and converts it to a PCAP file.

Script Data


Name Description
Script Type python3
Tags  
Cortex XSOAR Version 6.0.0

Used In


This script is used in the following playbooks and scripts.

  • PS-Remote Get Network Traffic

Inputs


Argument Name Description
EntryID The file entry ID of the ETL File.

Outputs


Path Description Type
EtlToPcap.NewFileName The output filename. Unknown
import os
import Etl2Pcap as etl2pcap


def test_etl_to_pcap():
    output_path = "./test_data/pcap.pcap"
    etl2pcap.etl_to_pcap("./test_data/etl_example.etl", output_path)
    assert os.path.isfile(output_path)