sectionorder: - Connect name: MetaDefender Aether display: MetaDefender Aether commonfields: id: MetaDefender Aether version: -1 category: Forensics & Malware Analysis description: Next-generation unified Zero-Day detection solution, combining Threat Reputation, Dynamic Analysis, Threat Scoring, and Threat Hunting into a single adaptive detection pipeline (previously known as MetaDefender Sandbox). configuration: - name: url display: Server URL (e.g. https://www.filescan.io/api) defaultvalue: https://www.filescan.io/api required: true type: 0 section: Connect - name: api_key displaypassword: API Key additionalinfo: The API Key to use for connection required: true hiddenusername: true type: 9 section: Connect - name: insecure display: Trust any certificate (not secure) type: 8 required: false section: Connect - name: proxy display: Use system proxy settings type: 8 required: false section: Connect script: script: "-" type: python subtype: python3 dockerimage: demisto/fastapi:0.125.0.10158186 runonce: false commands: - name: metadefender-aether-scan-url description: Scan URL resource. polling: true arguments: - name: flow_id description: The flow ID to poll. deprecated: true - name: url description: The URL to submit. required: true default: true - name: timeout description: The timeout for the polling in seconds. defaultValue: "600" - name: hide_polling_output description: Hide polling output. deprecated: true - name: description description: Uploaded file/url description. - name: tags description: Tags array to propagate. - name: password description: Custom password, in case uploaded archive is protected. secret: true - name: is_private description: If file should not be available for download by other users. outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: File.Name description: The full file name (including file extension). type: String - contextPath: File.SHA256 description: The SHA256 hash of the file. type: String - contextPath: File.Malicious.Vendor description: The vendor that reported the file as malicious. type: String - contextPath: MetaDefender.Aether.Submission.flow_id description: The flow ID. type: String - contextPath: MetaDefender.Aether.Analysis.finalVerdict.verdict description: The final verdict. type: String - contextPath: MetaDefender.Aether.Analysis.allTags description: All tags. type: Unknown - contextPath: MetaDefender.Aether.Analysis.overallState description: Overall state of the scan. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.name description: Name of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.additionalInfo description: Additional information about the main scan task. type: Unknown - contextPath: MetaDefender.Aether.Analysis.taskReference.ID description: ID of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.state description: State of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.resourceReference description: Resource reference of the main scan task. type: Unknown - contextPath: MetaDefender.Aether.Analysis.taskReference.opcount description: Counter. type: Number - contextPath: MetaDefender.Aether.Analysis.taskReference.processTime description: processTime. type: Number - contextPath: MetaDefender.Aether.Analysis.subtaskReferences description: Status of scan subtasks. type: Unknown - contextPath: MetaDefender.Aether.Analysis.allSignalGroups description: All signal groups. type: Unknown - contextPath: MetaDefender.Aether.Analysis.resources description: Resources. type: Unknown - contextPath: MetaDefender.Aether.Analysis.file.name description: The name of the file. type: String - contextPath: MetaDefender.Aether.Analysis.file.hash description: The SHA256 of the file. type: String - contextPath: MetaDefender.Aether.Analysis.file.type description: The type of the submission. type: String - name: metadefender-aether-scan-file description: Scan file resource. polling: true arguments: - name: flow_id description: The flow ID to poll. deprecated: true - name: entry_id description: The War Room entry ID of the file to submit. required: true - name: timeout description: The timeout for the polling in seconds. defaultValue: "1200" - name: hide_polling_output description: Hide polling output. deprecated: true - name: description description: Uploaded file/url description. - name: tags description: Tags array to propagate. - name: password description: Custom password, in case uploaded archive is protected. secret: true - name: is_private description: If file should not be available for download by other users. outputs: - contextPath: DBotScore.Indicator description: The indicator that was tested. type: String - contextPath: DBotScore.Type description: The indicator type. type: String - contextPath: DBotScore.Vendor description: The vendor used to calculate the score. type: String - contextPath: DBotScore.Score description: The actual score. type: Number - contextPath: File.Name description: The full file name (including file extension). type: String - contextPath: File.SHA256 description: The SHA256 hash of the file. type: String - contextPath: File.Malicious.Vendor description: The vendor that reported the file as malicious. type: String - contextPath: MetaDefender.Aether.Submission.flow_id description: The flow ID. type: String - contextPath: MetaDefender.Aether.Analysis.finalVerdict.verdict description: The final verdict. type: String - contextPath: MetaDefender.Aether.Analysis.allTags description: All tags. type: Unknown - contextPath: MetaDefender.Aether.Analysis.overallState description: Overall state of the scan. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.name description: Name of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.additionalInfo description: Additional information about the main scan task. type: Unknown - contextPath: MetaDefender.Aether.Analysis.taskReference.ID description: ID of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.state description: State of the main scan task. type: String - contextPath: MetaDefender.Aether.Analysis.taskReference.resourceReference description: Resource reference of the main scan task. type: Unknown - contextPath: MetaDefender.Aether.Analysis.taskReference.opcount description: Counter. type: Number - contextPath: MetaDefender.Aether.Analysis.taskReference.processTime description: processTime. type: Number - contextPath: MetaDefender.Aether.Analysis.subtaskReferences description: Status of scan subtasks. type: Unknown - contextPath: MetaDefender.Aether.Analysis.allSignalGroups description: All signal groups. type: Unknown - contextPath: MetaDefender.Aether.Analysis.resources description: Resources. type: Unknown - contextPath: MetaDefender.Aether.Analysis.file.name description: The name of the file. type: String - contextPath: MetaDefender.Aether.Analysis.file.hash description: The SHA256 of the file. type: String - contextPath: MetaDefender.Aether.Analysis.file.type description: The type of the submission. type: String - name: metadefender-aether-search-query description: Search for reports. Finds reports and uploaded files by various tokens. arguments: - name: query required: true default: true description: The query string. - name: page description: Page number, starting from 1. - name: page_size description: Page size. Can be 5, 10 or 20. auto: PREDEFINED predefined: - '5' - '10' - '20' - name: limit description: Number of total results. Maximum 50 (if page and page_size was also provided, then it will be ignored). outputs: - contextPath: MetaDefender.Aether.Analysis.id description: The analysis id. type: String - contextPath: MetaDefender.Aether.Analysis.file.name description: The file name. type: String - contextPath: MetaDefender.Aether.Analysis.file.sha256 description: The file SHA256. type: String - contextPath: MetaDefender.Aether.Analysis.verdict description: The scan verdict. type: String - contextPath: MetaDefender.Aether.Analysis.state description: The scan state. Eg. success, failed. type: String - contextPath: MetaDefender.Aether.Analysis.date description: The scan date. type: Date - contextPath: MetaDefender.Aether.Analysis.file.mime_type description: The file MimeType. type: String - contextPath: MetaDefender.Aether.Analysis.file.short_type description: The type of the submission. type: String - contextPath: MetaDefender.Aether.Analysis.tags description: Tags. type: Unknown fromversion: 6.10.0 tests: - No tests