category: Forensics & Malware Analysis
provider: Palo Alto Networks
sectionorder:
- Connect
- Collect
commonfields:
  id: WildFire-Reports
  version: -1
configuration:
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- defaultvalue: https://wildfire.paloaltonetworks.com/publicapi
  display: Server base URL (e.g., https://192.168.0.1/publicapi)
  name: server
  required: true
  type: 0
  section: Connect
- name: credentials
  type: 9
  displaypassword: API Key
  hiddenusername: true
  section: Connect
  required: false
- display: API Key
  name: token
  type: 4
  fromlicense: encrypted
  hidden: true
  section: Connect

  required: false
- display: Override Agent
  additionalinfo: Override the agent header sent with WildFire API requests. auto = auto-detect based on platform (XSOAR/XSIAM), xdr = Cortex XSIAM, xsoartim = XSOAR TIM, pcc = Prisma Cloud Compute, prismaaccessapi = Prisma Access, other = NGFW
  name: agent
  type: 15
  section: Connect
  advanced: true
  required: false
  defaultvalue: auto
  options:
  - auto
  - xdr
  - xsoartim
  - prismaaccessapi
  - pcc
  - other

description: Generates a Palo Alto Networks WildFire PDF report. For internal use with the TIM Sample Analysis feature.
display: Palo Alto Networks WildFire Reports
name: WildFire-Reports
defaultEnabled: true
script:
  commands:
  - arguments:
    - description: SHA256 hash to check.
      name: sha256
      required: true
    description: Retrieves results for a file hash using WildFire.
    name: internal-wildfire-get-report
  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/python3:3.12.13.10116658
fromversion: 6.5.0
tests:
- No tests (auto formatted)