Joe Sandbox v2

This app supports executing investigative actions to analyze files and URLs on Joe Sandbox

Supported Actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration

  • detonate file: Retrieve detonation analysis results for file

  • get pcap: Download the pcap file and add it to the vault

  • get report: Download the detonation report and add it to the vault

  • check status: Check status of sample file or URL submitted for analysis

  • detonate url: Retrieve detonation analysis results for URL

  • url reputation: Query Joe Sandbox for URL reputation

  • file reputation: Query Joe Sandbox for file reputation

  • list cookbooks: List all cookbooks

  • get cookbook: Get a cookbook and add it to vault

LogoJoe Sandbox v2 | Splunkbasesplunkbase.splunk.com
PreviousThreat Hunting EssentialsNextCreate/Modify User account

Last updated