WildFire

Integration version: 6.0

‌Configure WildFire to work with Google Security Operations SOAR

To obtain the API Key for your WildFire public cloud, please complete following steps:

  1. Log in to the WildFire portal.
  2. Select Account on the navigation bar at the top of the page.
  3. Your API key(s) is under My WildFire API Keys.

Configure WildFire integration in Google Security Operations SOAR

For detailed instructions on how to configure an integration in Google Security Operations SOAR, see Configure integrations.

Actions

Detonate File

Description

Upload a file to WildFire and retrieve a report.

Parameters

Parameter Type Default Value Description
File Paths String N/A N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
success True/False success:False
JSON Result
N/A

Get File

Description

Download and save a sample from WildFire.

Parameters

N/A

Run On

This action runs on the Filehash entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
success True/False success:False
JSON Result
N/A

Get Pcap

Description

Download and save the PCAP file of a sample from WildFire.

Parameters

N/A

Run On

This action runs on the Filehash entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
success True/False success:False
JSON Result
N/A

Get Report

Description

Get a detonation report from WildFire.

Parameters

N/A

Run On

This action runs on the Filehash entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
success True/False success:False
JSON Result
N/A

Ping

Description

Test connectivity to Wildfire.

Parameters

N/A

Run On

This action runs on all entities.

Action Results

Entity Enrichment

N/A

Insights

N/A

Script Result
Script Result Name Value Options Example
success True/False success:False
JSON Result
N/A