{ "associatedToAll": false, "associatedTypes": [ "Use Case Builder" ], "caseInsensitive": true, "cliName": "usecasebuilderforensicsandmalwareanalysis", "closeForm": false, "content": true, "editForm": true, "group": 0, "hidden": false, "id": "incident_usecasebuilderforensicsandmalwareanalysis", "isReadOnly": false, "locked": false, "name": "Use Case Builder Forensics and Malware Analysis", "neverSetAsRequired": false, "openEnded": false, "ownerOnly": false, "required": false, "sla": 0, "system": false, "threshold": 72, "type": "markdown", "unmapped": false, "unsearchable": true, "useAsKpi": false, "version": -1, "fromVersion": "6.8.0", "template": "# Forensics and Malware Analysis\n## Top Use Cases:\n\n- Submit a file and get a report (detonation)\n- Submit a URL and get a report (detonation)\n- Search for past analysis (input being a hash/url).\n- Retrieve a PCAP file\n- Retrieve screenshots taken during analysis.\n\n## Sandbox Integration Example: [Cuckoo Sandbox](https://xsoar.pan.dev/docs/reference/integrations/cuckoo-sandbox)" }