Details
Content
Dependencies
Version History

Scalable malware sandbox

### Hatching Triage

Hatching (https://hatching.io/) Triage (https://tria.ge/) is a highly scalable
automated malware analysis sandbox supporting Windows, Android, Linux, and
macOS analysis.

Also make sure to read our blog over at https://hatching.io/blog and to follow
us on twitter for the latest malware insights https://twitter.com/hatching_io.

### Hatching Triage

Hatching (https://hatching.io/) Triage (https://tria.ge/) is a highly scalable
automated malware analysis sandbox supporting Windows, Android, Linux, and
macOS analysis.

Also make sure to read our blog over at https://hatching.io/blog and to follow
us on twitter for the latest malware insights https://twitter.com/hatching_io.

Integrations

Name	Description
Hatching Triage (Partner Contribution)	Submit a high volume of samples to run in a sandbox and view reports.

Playbooks

Name	Description
Detonate URL - Hatching Triage	Detonating URL with Hatching Triage.

Integrations

Name	Description
Hatching Triage (Partner Contribution)	Submit a high volume of samples to run in a sandbox and view reports.

Playbooks

Name	Description
Detonate URL - Hatching Triage	Detonating URL with Hatching Triage.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (6)

Pack Name	Pack By
Rasterize	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR

1.0.16 - 755215 (January 10, 2024)

Integrations

Hatching Triage

Fixed an issue where using the integration could potentially cause xsoar to be overloaded.
Updated the Docker image to: demisto/python3:3.10.13.84405.

Related pull requests:
- 32113

Download

1.0.15 - 6877054 (November 13, 2023)

Integrations

Hatching Triage

Added the credential support for the API token integration parameter.
Updated the Docker image to: demisto/python3:3.10.13.80014.

Related pull requests:
- 30862
- 30395

Download

1.0.14 - 6510499 (October 4, 2023)

Integrations

Hatching Triage

Update the Integration documentation, with additional links and urls to different sandbox instances. For better visibility of the options available.

Related pull requests:
- 30024
- 30037

Download

1.0.13 - 5976562 (August 7, 2023)

Integrations

Hatching Triage

Documentation and metadata improvements.

Related pull requests:
- 28670

Download

1.0.12 - R5801668 (July 18, 2023)

Integrations

Hatching Triage

Updated the Docker image to: demisto/python3:3.10.12.63474.

Related pull requests:
- 27954

Download

1.0.11 - R5692327 (July 5, 2023)

Playbooks

Detonate URL - Hatching Triage

Updated the sleep task to run without worker

Related pull requests:
- 26710
- 26976

Download

1.0.10 - R5170573 (May 2, 2023)

Integrations

Hatching Triage

Fixed an issue where the integration would crash due to connection errors when trying to retrieve XSOAR version.
Updated the Docker image to: demisto/python3:3.10.11.54132.

Related pull requests:
- 25958
- 25943

Download

1.0.9 - 4954430 (April 2, 2023)

Integrations

Hatching Triage

Added user_tags argument to the triage-submit-sample command, which makes it possible to specify an array of user tags
Update user-agent string to include the integration version
Update docker image tag to demisto/python3:3.10.10.51930

Related pull requests:
- 25632
- 25672

Download

1.0.8 - R4718798 (March 1, 2023)

Integrations

Hatching Triage

Added multiple new arguments to the triage-submit-sample command.
- Added the timeout argument, which makes it possible to specify a timeout in seconds for the behavioral analysis
- Added the network argument, which makes it possible to specify the type of network to use during the behavioral analysis
- Added the password argument, which may be used to specify the password for an encrypted file
Updated the triage-submit-sample command to actually use the interactive argument.
The sample_id argument for triage-get-sample-summary now accepts an array.
Update docker image tag to demisto/python3:3.10.9.42476

Related pull requests:
- 23684
- 23685

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Partner
Created	January 9, 2021
Last Release	January 10, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.