Submit File For Analysis - BlinkOps Documentation

Submit a malware sample for analysis. Note, Submitting a file counts against your submission quota. If you’ve used your monthly quota, you must wait until the quota resets to submit additional files. One of the following subscriptions is required to execute this action:

Falcon Intelligence or Falcon Intelligence Premium.

External DocumentationTo learn more, visit the CrowdStrike documentation.

Parameters

Parameter	Description
Comment	Provide a comment on the file.
Environment ID	The sandbox environment ID, in which you want to analysis the file.
File Identifier	The identifier of the file. A file identifier represents a file created or referenced earlier in the workflow (for example, from a file action or another step that produces a file). See Using with Files in Workflows for more details.
File Name	The name of the file.

Example Output

{
	"meta": {
		"query_time": 3.171612093,
		"powered_by": "falconx-api",
		"trace_id": "9078d20a-62b0-438e-9b3f-d4d44bf82334",
		"quota": {
			"total": 5000,
			"used": 0,
			"in_progress": 1
		}
	},
	"resources": [
		{
			"id": "0123456789ABCDEFGHIJKLMNOPQRSTUV_eecd9a8f319940dfb0255e5d436822d9",
			"cid": "0123456789ABCDEFGHIJKLMNOPQRSTUV",
			"origin": "uiproxy",
			"state": "created",
			"created_timestamp": "2019-01-03T13:09:49Z",
			"sandbox": [
				{
					"sha256": "42a615198bcdfc72839936409c88af7ded125feabfec4753b307dc985aaba48f",
					"environment_id": 100,
					"submit_name": "virus.exe"
				}
			]
		}
	],
	"errors": []
}

Workflow Library Example

Submit File for Analysis with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop

Search Vulnerabilities Update Alerts

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example