StaticAnalyze

For phishing incidents, iterate on all attachments and run PE dump on each

Source

var entries = executeCommand('getEntries', {});
var res = [];
for (var i=0; i<entries.length; i++) {
    if (entries[i].File) {
        var fileName = fileNameFromEntry(entries[i].ID);
        var rep = executeCommand('D2PEDump', {file: fileName, files: fileName, system: args.system});
        Array.prototype.push.apply(res, rep);
    }
}
if (res.length > 0) {
  return res;
}
return 'No files found';

README

Iterates on all attachments and runs a PE dump on each. This is for phishing incidents.

Script Data

Name	Description
Script Type	javascript
Tags	phishing

Inputs

There are no inputs for this script.

Outputs

There are no outputs for this script.