category: Forensics & Malware Analysis
provider: ReversingLabs
commonfields:
  id: ReversingLabs A1000
  version: -1
configuration:
- defaultvalue: https://a1000.reversinglabs.com
  display: Base URL of the A1000 box
  name: base
  required: true
  type: 0
- display: Token to use for authentication
  name: token
  required: true
  type: 4
- defaultvalue: 'false'
  display: Provide extended information when available
  name: extended
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- defaultvalue: 'true'
  display: Verify host certificates
  name: verify
  type: 8
  required: false
description: Deprecated. Use the ReversingLabs A1000 v2 integration instead.
display: ReversingLabs A1000 (Deprecated)
name: ReversingLabs A1000
deprecated: true
script:
  commands:
  - arguments:
    - default: true
      description: file hash
      name: file
      required: true
    deprecated: true
    description: Retrieve file reputation data from an A1000 appliance
    name: file
    outputs:
    - contextPath: File.MD5
      description: Bad hash found
      type: Unknown
    - contextPath: File.SHA1
      description: Bad hash SHA1
      type: Unknown
    - contextPath: File.SHA256
      description: Bad hash SHA256
      type: Unknown
    - contextPath: File.Malicious.Vendor
      description: For malicious files, the vendor that made the decision
      type: Unknown
    - contextPath: File.Malicious.Detections
      description: For malicious files. Total detections.
      type: Unknown
    - contextPath: File.Malicious.TotalEngines
      description: For malicious files. Total engines
      type: Unknown
    - contextPath: DBotScore.Indicator
      description: The indicator we tested
      type: Unknown
    - contextPath: DBotScore.Type
      description: The type of the indicator
      type: Unknown
    - contextPath: DBotScore.Vendor
      description: Vendor used to calculate the score
      type: Unknown
    - contextPath: DBotScore.Score
      description: The actual score
      type: Unknown
  - arguments:
    - default: true
      description: The file entry to upload
      name: entryId
      required: true
    - description: A comment to add to the file
      name: comment
    - description: List of tags for the file
      name: tags
    - auto: PREDEFINED
      defaultValue: 'true'
      description: Should we send to TICloud for analysis
      name: cloud_analyze
      predefined:
      - 'true'
      - 'false'
    deprecated: true
    description: Upload a sample to A1000 for analysis
    execution: true
    name: reversinglabs-upload
  - arguments:
    - default: true
      description: The hash to delete
      name: hash
      required: true
    deprecated: true
    description: Delete an uploaded sample
    execution: true
    name: reversinglabs-delete
  - arguments:
    - default: true
      description: The sample hash
      name: hash
      required: true
    deprecated: true
    description: List extracted files from a sample
    name: reversinglabs-extracted-files
    outputs:
    - contextPath: File.MD5
      description: Bad hash found
      type: Unknown
    - contextPath: File.SHA1
      description: Bad hash SHA1
      type: Unknown
    - contextPath: File.SHA256
      description: Bad hash SHA256
      type: Unknown
    - contextPath: File.Malicious.Vendor
      description: For malicious files, the vendor that made the decision
      type: Unknown
    - contextPath: File.Malicious.Detections
      description: For malicious files. Total detections.
      type: Unknown
    - contextPath: File.Malicious.TotalEngines
      description: For malicious files. Total engines
      type: Unknown
    - contextPath: DBotScore.Indicator
      description: The indicator we tested
      type: Unknown
    - contextPath: DBotScore.Type
      description: The type of the indicator
      type: Unknown
    - contextPath: DBotScore.Vendor
      description: Vendor used to calculate the score
      type: Unknown
    - contextPath: DBotScore.Score
      description: The actual score
      type: Unknown
  - arguments:
    - default: true
      description: Sample hash to download
      name: hash
      required: true
    deprecated: true
    description: Download a sample to the investigation
    name: reversinglabs-download
  - arguments:
    - default: true
      description: The hash of an already uploaded sample
      name: hash
      required: true
    deprecated: true
    description: Re-analyze sample
    execution: true
    name: reversinglabs-analyze
  - arguments:
    - default: true
      description: The sample hash we want unpacked samples for
      name: hash
      required: true
    deprecated: true
    description: Download samples obtained through the unpacking process
    name: reversinglabs-download-unpacked
  runonce: false
  script: ''
  subtype: python2
  type: python
  dockerimage: demisto/python:2.7.18.20958
fromversion: 5.0.0