Pulling updated hash values of unwanted softwares from unit 42.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Pulling updated hash values of unwanted softwares from unit 42.

L0 Member

Hi Everyone,

 

Is there any possibility within Cortex XSOAR to pull updated hash values of unwanted software from unit42?

 

Scenario: If we have a list of hash values of unwanted software (like Team viewer for eg) and we enrich the hash indicators using unit42. Now, in future if the software is updated, could we possible fetch the updated hash value of it through SOAR?

 

Any suggestions or insights would be helpful.

 

Thanks & Regards,

Nidhi Khandelwal

1 REPLY 1

L1 Bithead

You can do this by importing the hash values as indicators. Depending on the type of resource you want to import/fetch, you can install and configure the necessary integrations from the marketplace:
CSV Feed
JSON Feed
Plain Text Feed

RSS Feed

TAXII Feed,

etc.

Depending on your license(TIM Module license), there is a limit on fetching. But you can control the fetching, extraction and enrichment operations using a Feed-based Job.

 

  • 537 Views
  • 1 replies
  • 0 Likes
  • 31 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!