Get File Scan Result - BlinkOps Documentation

Get the full analysis report for a previously scanned file by its hash.

External DocumentationTo learn more, visit the Kaspersky Threat Intelligence Portal documentation.

Parameters

Parameter	Description
File Hash	The MD5, SHA1, or SHA256 hash of the scanned file. Can be obtained from the `Scan File` action.

Example Output

{
	"Status": "complete",
	"Zone": "Red",
	"FileGeneralInfo": {
		"FileStatus": "Malware",
		"Sha1": "<string>",
		"Md5": "<string>",
		"Sha256": "<string>",
		"Size": 1024000,
		"Type": "PE executable"
	},
	"DetectionsInfo": [
		{
			"LastDetectDate": "2023-06-20T14:45:00Z",
			"DescriptionUrl": "https://threats.kaspersky.com/en/threat/Trojan.Win32.Generic",
			"Zone": "Red",
			"DetectionName": "Trojan.Win32.Generic",
			"DetectionMethod": "Heuristic analysis"
		}
	],
	"DynamicAnalisysResults": {
		"Detections": [
			{
				"Zone": "Red",
				"Count": 3
			}
		],
		"SuspiciousActivities": [
			{
				"Zone": "Red",
				"Count": 5
			}
		],
		"ExtractedFiles": [
			{
				"Zone": "Green",
				"Count": 2
			}
		],
		"NetworkActivities": [
			{
				"Zone": "Red",
				"Count": 4
			}
		],
		"DynamicDetections": [
			{
				"Zone": "Red",
				"Threat": 2
			}
		],
		"TriggeredNetworkRules": [
			{
				"Zone": "Red",
				"RuleName": "SNORT.CNC.C2Communication"
			}
		]
	}
}

Workflow Library Example

Get File Scan Result with Kaspersky Threat Intelligence Portal and Send Results Via Email

Preview this Workflow on desktop