Check the progress of samples previously submitted for analysis. One of the following subscriptions is required to execute this action:
  • Falcon Intelligence or Falcon Intelligence Premium.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Parameters

ParameterDescription
Samples IDsA comma separated list of Samples’ IDs to check their analysis progress.

​
Example Output

{
	"meta": {
		"query_time": 0.014949278,
		"powered_by": "falconx-api",
		"trace_id": "7215647f-ad29-4072-85c2-2b7ec0445824",
		"quota": {
			"total": 5000,
			"used": 1,
			"in_progress": 1
		}
	},
	"resources": [
		{
			"id": "5ddb0407bef249c19c7a975f17979a1f_eecd9a8f319940dfb0255e5d436822d9",
			"cid": "5ddb0407bef249c19c7a975f17979a1f",
			"origin": "uiproxy",
			"state": "running",
			"created_timestamp": "2019-01-03T13:09:49Z",
			"sandbox": [
				{
					"sha256": "42a615198bcdfc72839936409c88af7ded125feabfec4753b307dc985aaba48f",
					"environment_id": 100,
					"submit_name": "virus.exe"
				}
			]
		},
		{
			"id": "5ddb0407bef249c19c7a975f17979a1f_11f5bc35d86642f7927ce9d84c803005",
			"cid": "5ddb0407bef249c19c7a975f17979a1f",
			"origin": "quarantine",
			"state": "success",
			"created_timestamp": "2018-12-12T21:59:55Z",
			"sandbox": [
				{
					"sha256": "22cb05c340c042e1b541cac2a99f0fb43472ebdc6e18d5be953104c13d83d6fa",
					"environment_id": 100,
					"submit_name": "22cb05c340c042e1b541cac2a99f0fb43472ebdc6e18d5be953104c13d83d6fa"
				}
			]
		}
	],
	"errors": []
}

​
Workflow Library Example

Check Analysis Progress with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop