ReversingLabs_TitaniumCloud_File_Reputation.json

{
    "blockly": false,
    "blockly_xml": "<xml></xml>",
    "category": "File Reputation",
    "coa": {
        "data": {
            "description": "Queries ReversingLabs TitaniumCloud for file reputation.",
            "edges": [
                {
                    "id": "port_0_to_port_2",
                    "sourceNode": "0",
                    "sourcePort": "0_out",
                    "targetNode": "2",
                    "targetPort": "2_in"
                },
                {
                    "id": "port_2_to_port_1",
                    "sourceNode": "2",
                    "sourcePort": "2_out",
                    "targetNode": "1",
                    "targetPort": "1_in"
                }
            ],
            "hash": "9fa2c2696f530c43b9d0c8ff0a57f1d94ed75b98",
            "nodes": {
                "0": {
                    "data": {
                        "advanced": {
                            "join": []
                        },
                        "functionName": "on_start",
                        "id": "0",
                        "type": "start"
                    },
                    "errors": {},
                    "id": "0",
                    "type": "start",
                    "warnings": {},
                    "x": 1000,
                    "y": 419.9999999999993
                },
                "1": {
                    "data": {
                        "advanced": {
                            "join": []
                        },
                        "functionName": "on_finish",
                        "id": "1",
                        "type": "end"
                    },
                    "errors": {},
                    "id": "1",
                    "type": "end",
                    "warnings": {},
                    "x": 1000,
                    "y": 660
                },
                "2": {
                    "data": {
                        "action": "file reputation",
                        "actionType": "investigate",
                        "advanced": {
                            "customName": "titaniumcloud file reputation",
                            "customNameId": 0,
                            "join": [],
                            "note": "Queries Reversinglabs TitaniumCloud for a file hash reputation"
                        },
                        "connector": "Reversinglabs TitaniumCloud v2",
                        "connectorConfigs": [
                            "reversinglabs_titaniumcloud_v2"
                        ],
                        "connectorId": "0fd5a550-35a4-4641-9d28-9237ec71cf3c",
                        "connectorVersion": "v1",
                        "functionId": 1,
                        "functionName": "titaniumcloud_file_reputation",
                        "id": "2",
                        "parameters": {
                            "hash": "artifact:*.cef.fileHash"
                        },
                        "requiredParameters": [
                            {
                                "data_type": "string",
                                "field": "hash"
                            }
                        ],
                        "type": "action"
                    },
                    "errors": {},
                    "id": "2",
                    "type": "action",
                    "warnings": {},
                    "x": 980,
                    "y": 520
                }
            },
            "notes": ""
        },
        "input_spec": null,
        "output_spec": [
            {
                "contains": [],
                "datapaths": [
                    "file_reputation_1:action_result.data.*.rl.malware_presence.status"
                ],
                "deduplicate": false,
                "description": "Classification",
                "metadata": {},
                "name": "Classification"
            }
        ],
        "playbook_type": "automation",
        "python_version": "3",
        "schema": "5.0.8",
        "version": "5.5.0.108488"
    },
    "create_time": "2023-06-01T13:20:14.880779+00:00",
    "draft_mode": false,
    "labels": [
        "*"
    ],
    "tags": [
        "Externally Authored Content"
    ]
}