commonfields:
  id: OPSWAT-Metadefender V2
  version: -1
  sortvalues: []
sectionorder:
- Connect
- Collect
name: OPSWAT-Metadefender V2
display: OPSWAT-Metadefender v2
category: Data Enrichment & Threat Intelligence
provider: OPSWAT Inc
description: multi-scanning engine uses 30+ anti-malware engines to scan files for threats, significantly increasing malware detection.
configuration:
- display: Server URL (e.g. http://localhost:8008/metascan_rest/)
  name: url
  type: 0
  required: true
  section: Connect
- display: API Key - Needed in cloud based solutions
  name: api_key
  defaultvalue: ""
  type: 4
  hidden: true
  required: false
  section: Connect
- name: api_key_creds
  type: 9
  displaypassword: API Key - Needed in cloud based solutions
  hiddenusername: true
  required: false
  section: Connect
- display: Cloud based
  name: cloud
  type: 8
  defaultvalue: 'false'
  required: false
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: The high threshold
  name: highPercnt
  defaultvalue: '66'
  type: 0
  required: false
  section: Connect
- defaultvalue: '34'
  display: The low threshold
  name: lowPercnt
  type: 0
  required: false
  section: Connect
script:
  script: ''
  type: python
  commands:
  - name: opswat-scan-file
    arguments:
    - name: fileId
      required: true
      description: Entry id of a file in Demisto.
    - name: scanRule
      description: Name of the Rule to use for scanning.
    outputs:
    - contextPath: OPSWAT.FileName
      description: OPSWAT file name to scan.
      type: string
    - contextPath: OPSWAT.ScanId
      description: OPSWAT scan id of the scan.
      type: string
    description: Scan file in OPSWAT.
  - name: opswat-hash
    arguments:
    - name: hash
      required: true
      default: true
      description: File hash (Can be any hash type).
    description: Check file hash on OPSWAT.
  - name: opswat-scan-result
    arguments:
    - name: id
      required: true
      default: true
      description: OPSWAT scan id.
    description: Get OPSWAT result.
  - name: opswat-sanitization-result
    arguments:
    - name: id
      required: true
      default: true
      description: OPSWAT scan id.
    description: Get OPSWAT sanitization result (Requires CDR feature).
  dockerimage: demisto/python3:3.12.13.10116658
  subtype: python3
tests:
- No tests - no instance
fromversion: 5.0.0