Deprecated. Use the cs-falcon-sandbox-submit-file command with polling=true instead.
CrowdStrike Falcon Sandbox
- Details
- Content
- Dependencies
- Version History
Fully automated malware analysis (formerly Payload Security VxStream).
Playbooks
| Name | Description |
|---|---|
| CrowdStrike Falcon Sandbox - Detonate file | |
| Detonate URL - CrowdStrike | Deprecated. Use the cs-falcon-sandbox-submit-url command with polling=true instead. |
Integrations
| Name | Description |
|---|---|
| CrowdStrike Falcon Sandbox (Deprecated) | Deprecated. Use CrowdStrike Falcon Sandbox V2 instead. |
| CrowdStrike Falcon Sandbox v2 (Hybrid-Analysis) | Fully automated malware analysis using Hybrid Analysis API. |
Required Content Packs (11)
| Pack Name | Pack By |
|---|---|
| CommonScripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| CommonPlaybooks | By: Cortex XSOAR |
| DemistoRESTAPI | By: Cortex XSOAR |
| CommonTypes | By: Cortex XSOAR |
| CoreAlertFields | By: Cortex XSOAR |
| FiltersAndTransformers | By: Cortex XSOAR |
| rasterize | By: Cortex XSOAR |
| Core | By: Cortex XSOAR |
| Palo_Alto_Networks_WildFire | By: Cortex XSOAR |
| Active_Directory_Query | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
2.0.1 - 2784849 (April 19, 2022)
Integrations
CrowdStrike Falcon Sandbox v2
- Updated formatting of integration parameters.
2.0.0 - 2419785 (February 15, 2022)
Integrations
CrowdStrike Falcon Sandbox (Deprecated)
Use the CrowdStrike Falcon Sandbox v2 integration instead.
New: CrowdStrike Falcon Sandbox v2
Use the CrowdStrike Falcon Sandbox V2 integration to submit and analyze files and URLs. This integration is backwards compatible with the CrowdStrike Falcon Sandbox integration.
Playbooks
CrowdStrike Falcon Sandbox - Detonate file
- Deprecated. Use the cs-falcon-sandbox-submit-file command with polling=true instead.
Detonate URL - CrowdStrike
- Deprecated. Use the cs-falcon-sandbox-submit-url command with polling=true instead.
1.0.5 - R2330048 (January 30, 2022)
Integrations
CrowdStrike Falcon Sandbox
- Fixed an issue where no results were found when passing any file to the file argument in the crowdstrike-scan.
1.0.4 - 312966 (March 25, 2021)
Integrations
CrowdStrike Falcon Sandbox
- Maintenance and stability enhancements.
1.0.3 - R264879 (December 24, 2020)
Integrations
CrowdStrike Falcon Sandbox
- Breaking Change - replaced the API endpoint used for the crowdstrike-get-environments command as it was changed in the product.
1.0.2 - 184840 (November 12, 2020)
Integrations
CrowdStrike Falcon Sandbox
- Fixed an issue where the crowdstrike-result command did not work in case the file argument was not provided.
- Updated the report data download endpoint as the previous one was deprecated.
1.0.1 - R180529 (November 9, 2020)
Integrations
CrowdStrike Falcon Sandbox
Added the dontThrowErrorOnFileDetonation to the crowdstrike-submit-url command, which gives you the option not to throw an error when sending a URL that points to a file.
Playbooks
Detonate URL - CrowdStrike
The playbook will not fail when it detonates a URL that points to a file.
1.0.0 - R124496 (September 23, 2020)
Fully automated malware analysis (formerly Payload Security VxStream).
PUBLISHER
Cortex
PLATFORMS
Cortex XSOAR
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | September 23, 2020 | |
| Last Release | August 9, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
