search

TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine
https://thehive-project.org
GNU Affero General Public License v3.0
1.28k stars 218 forks source link

Cortex to provide hashes from file observables to analyzers #405

Open cyberpescadito opened 2 years ago

cyberpescadito commented 2 years ago

Request Type

Feature Request

Cortex to provide hashes when analyzing an observable of dataType "file". VirusTotal analyzer already look for these hashes: hashes = self.get_param("attachment.hashes", None) (see: https://github.com/TheHive-Project/Cortex-Analyzers/blob/master/analyzers/VirusTotal/virustotal.py#L258)