CylancePROTECT is an integrated threat prevention solution that combines the
power of artificial intelligence (AI) to block malware infections.
Cylance Protect
- Details
- Content
- Dependencies
- Version History
Manage Endpoints using Cylance protect
Playbooks
| Name | Description |
|---|---|
| Get File Sample By Hash - Cylance Protect | Deprecated. Use "Get File Sample By Hash - Cylance Protect v2" playbook instead. |
| Endpoint Enrichment - Cylance Protect v2 | Enriches endpoints using the Cylance Protect v2 integration. |
| Get File Sample By Hash - Cylance Protect v2 | This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration. |
| Block File - Cylance Protect v2 | This playbook accepts a SHA256 hash and adds the hash to the Global Quarantine list using the Cylance Protect v2 integration. |
Integrations
| Name | Description |
|---|---|
| Cylance Protect v2 | Manage Endpoints using Cylance protect |
Playbooks
| Name | Description |
|---|---|
| Get File Sample By Hash - Cylance Protect | Deprecated. Use "Get File Sample By Hash - Cylance Protect v2" playbook instead. |
| Endpoint Enrichment - Cylance Protect v2 | Enriches endpoints using the Cylance Protect v2 integration. |
| Get File Sample By Hash - Cylance Protect v2 | This playbook returns a file sample to the War Room given the file's SHA256 hash, using Cylance Protect v2 integration. |
| Block File - Cylance Protect v2 | This playbook accepts a SHA256 hash and adds the hash to the Global Quarantine list using the Cylance Protect v2 integration. |
Integrations
| Name | Description |
|---|---|
| Cylance Protect v2 | Manage Endpoints using Cylance protect |
Required Content Packs (3)
| Pack Name | Pack By |
|---|---|
| CommonScripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| DemistoRESTAPI | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
1.1.0 - 2988482 (May 26, 2022)
Integrations
Cylance Protect v2
- New Commands
Added support for Optics API with 3 new commands:
- cylance-optics-create-instaquery.
- cylance-optics-get-instaquery-result.
- cylance-optics-list-instaquery.
- Added the full context and raw_response result for cylance-protect-get-policy-details.
1.0.9 - 2371508 (February 7, 2022)
Integrations
Cylance Protect v2
- Fixed an issue where multiple indicators returned DBotScore objects simultaneously.
1.0.8 - R2146019 (December 21, 2021)
Integrations
Cylance Protect v2
- Updated the Docker image to: demisto/pyjwt:1.0.0.24033.
1.0.7 - 399371 (July 18, 2021)
Integrations
Cylance Protect v2
- Updated the Docker image to: demisto/pyjwt:1.0.0.19034.
- Added the cylance-protect-get-device-by-hostname command.
1.0.6 - 357316 (May 18, 2021)
Integrations
Cylance Protect v2
- Fixed an issue where the DBotScore and File context data was not parsed correctly for the cylance-protect-get-device-threats, cylance-protect-get-threats, cylance-protect-get-list and cylance-protect-download-threat commands.
1.0.5 - 356061 (May 13, 2021)
Playbooks
Get File Sample By Hash - Cylance Protect
- Playbook was updated with the "deprecated" field.
1.0.4 - 349049 (May 6, 2021)
Integrations
Cylance Protect v2
- Maintenance and stability enhancements.
1.0.3 - 334155 (April 22, 2021)
Playbooks
get_file_sample_by_hash_-_cylance_protect
- DEPRECATED. Use "Get File Sample By Hash - Cylance Protect v2" playbook instead.
Endpoint Enrichment - Cylance Protect v2
- Maintenance and stability enhancements.
Get File Sample By Hash - Cylance Protect
- Maintenance and stability enhancements.
Block File - Cylance Protect v2
- Maintenance and stability enhancements.
Get File Sample By Hash - Cylance Protect v2
- Maintenance and stability enhancements.
1.0.2 - R264879 (January 7, 2021)
Playbooks
Get File Sample By Hash - Cylance Protect v2
- Added file outputs to the playbook.
1.0.1 - R180529 (November 9, 2020)
Integrations
Cylance Protect v2
- Fixed an issue where arguments' names in python code as 'pageNumber' and 'pageSize' did not match to the arguments' names in the configuration file.
- Upgraded the Docker image to demisto/pyjwt:1.0.0.12779.
1.0.0 - R124496 (September 23, 2020)
Manage Endpoints using Cylance protect
PUBLISHER
Cortex
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | September 23, 2020 | |
| Last Release | November 16, 2022 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
