FireEyeDetonateFile

Details

ID	`FireEyeDetonateFile`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	fireeye file enhancement

README

Detonates a file or URL through FireEye.

Script Data

Name	Description
Script Type	python
Tags	fireeye, file, enhancement

Dependencies

This script uses the following commands and scripts.

fe-submit-result
fe-submit-status
fe-submit

Inputs

Argument Name	Description
file	The file/entry ID to detonate.
profiles	The FireEye profiles to use (comma-separated).
analysistype	Specifies live or sandbox analysis mode. “Sandbox”, analyzes suspected malware objects in a closed, protected environment. “Live”, analyzes suspected malware objects live within the MAS Multivector Virtual Execution (MVX) analysis engine.
prefetch	Whether to determine the file target based on an internal determination rather than browsing to the target location. Can be, “No” or “Yes”.

Outputs

There are no outputs for this script.

Source

FireEyeDetonateFile.py FireEyeDetonateFile_test.py FireEyeDetonateFile.yml

Download History Raw

commonfields:
  id: FireEyeDetonateFile
  version: -1
name: FireEyeDetonateFile
script: ''
type: python
subtype: python3
tags:
- fireeye
- file
- enhancement
comment: Detonate File or URL through FireEye.
enabled: true
args:
- name: file
  required: true
  default: true
  description: File /EntryID to detonate.
- name: profiles
  required: true
  description: The FireEye profiles to use (comma separated).
- name: analysistype
  description: Specify live or sandbox analysis mode. 0—Sandbox, analyze suspected malware objects in a closed, protected environment. 1 —Live, analyze suspected malware objects live within the MAS Multivector Virtual Execution (MVX) analysis engine.
  defaultValue: "0"
- name: prefetch
  description: Specifies whether to determine the file target based on an internal determination rather than browsing to the target location. 0—No 1—Yes.
  defaultValue: "1"
scripttarget: 0
dependson:
  must:
  - fe-submit
  - fe-submit-result
  - fe-submit-status
timeout: 960ns
tests:
- No test
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658