ReversingLabs TitaniumCloud
- Jonas Gonzalez
ReversingLabs TitaniumCloud Reputation Services are powerful threat intelligence solutions with up-to-date, threat classification and rich context on over 8 billion goodware and malware files.
Connect ReversingLabs TitaniumCloud with Devo SOAR
Navigate to Automations > Integrations.
Search for ReversingLabs TitaniumCloud.
Click Details, then the + icon. Enter the required information in the following fields.
Label: Enter a connection name.
Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
Remote Agent: Run this integration using the Devo SOAR Remote Agent.
Username: Username for ReversingLabs TitaniumCloud instance.
Password: Password to your ReversingLabs TitaniumCloud instance.
After you've entered all the details, click Connect.
Actions for ReversingLabs TitaniumCloud
File Hash Reputation Lookup
Scan file hash to detect if the file contains any anomalous attribute.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
|---|---|---|
File Hash Type | The type of file hash. | Required |
File Hash Values Column Name | Column name from parent table to lookup value for file hash. | Required |
Output
A JSON object containing multiple rows of result:
has_error: True/False
error: message/null
``` {json}{ "has_error": true, "error": "Please provide the hash value" }
## File Hash Reputation Lookup in Bulk
Scan file hash in bulk to detect if the file contains any anomalous attribute.
### Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
| Input Name | Description | Required |
| :--------------------------- | :------------------------------------------------------------------ | :------- |
| File Hash Type | The type of file hash. | Required |
| Extended View or Not | Extended view or not (default is 'True'). | Required |
| File Hash Values Column Name | Column name from parent table to lookup value for file hashes list. | Required |
### Output
A JSON object containing multiple rows of result:
- has_error: True/False
- error: message/null
``` {json}{
"has_error": true,
"error": "Please provide the hash value"
}File Upload for Analysis
Scan file to detect if the file contains any anomalous attribute.
Input Field
Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.
Input Name | Description | Required |
|---|---|---|
File Hash Type | The type of file hash. (Default is 'sha256'). | Required |
Filename Column Name | Column name from parent table to lookup value for file name. | Required |
Output
A JSON object containing multiple rows of result:
has_error: True/False
error: message/null
{json}{
"has_error": true,
"error": "Please provide the file"
}
Release Notes
v3.0.0- Updated architecture to support IO via filesystemv2.0.1- Added documentation link in the automation library.