UnzipFile
Unzip a file using fileName or entryID to specify a file. Unzipped files will be loaded to the War Room and names will be put into the context.
python · Common Scripts
Details
| ID | UnzipFile |
|---|---|
| Language | python |
| From Version | 5.0.0 |
| Docker Image | demisto/unzip:1.0.0.11009641 |
| Tags | Utility file |
README
Unzip a file using fileName or entryID to specify a file. Unzipped files will be loaded to the War Room and names will be put into the context.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | Utility, file |
| Cortex XSOAR Version | 5.0.0 |
Used In
Sample usage of this script can be found in the following playbooks and scripts.
- Comprehensive PAN-OS Best Practice Assessment
- Cortex XDR - Retrieve File by sha256
- CrowdStrike Falcon - Retrieve File
- Get File Sample By Hash - Cylance Protect
- Local Analysis alert Investigation
- MDE - Retrieve File
- PS Remote Get File Sample From Path
- PS-Remote Get MFT
- PS-Remote Get Registry
- Pull Request Creation - Generic
Inputs
| Argument Name | Description |
|---|---|
| fileName | The file name. |
| password | Password to protect the ZIP file. |
| nonsensitive_password | Password to protect the ZIP file, inserted as a non sensative argument. |
| entryID | The entry ID of the attached ZIPp file in the War Room. |
| lastZipFileInWarroom | Enter ‘yes’ (or any other value) if the ZIP file is last ZIP file in the War Room. |
| zipTool | Tool to extract zip |
Outputs
| Path | Description | Type |
|---|---|---|
| ExtractedFiles | A list of file names that were extracted from the ZIP file. | Unknown |
args: - default: true description: The file name. name: fileName - description: Password to protect the ZIP file. name: password secret: true - description: Password to protect the ZIP file, inserted as a non sensative argument. name: nonsensitive_password - description: The entry ID of the attached ZIPp file in the War Room. name: entryID - description: Enter 'yes' (or any other value) if the ZIP file is last ZIP file in the War Room. name: lastZipFileInWarroom - auto: PREDEFINED defaultValue: 7z description: Tool to extract zip. name: zipTool predefined: - 7z - zipfile comment: Unzip a file using fileName or entryID to specify a file. Unzipped files will be loaded to the War Room and names will be put into the context. commonfields: id: UnzipFile version: -1 enabled: true name: UnzipFile outputs: - contextPath: ExtractedFiles description: A list of file names that were extracted from the ZIP file. type: Unknown script: '-' subtype: python3 tags: - Utility - file timeout: '0' type: python dockerimage: demisto/unzip:1.0.0.11009641 tests: - ZipFile-Test - UnzipFile-Test fromversion: 5.0.0