RA2321: submit file to sandbox

atc-project / atc-react

A knowledge base of actionable Incident Response techniques

Apache License 2.0

606 stars 113 forks source link

RA2321: submit file to sandbox #358

Closed oi-m8 closed 3 years ago

oi-m8 commented 3 years ago

Fixes issue: #357

This pull request is intended to add the step sometimes taken during the identification phase where an analyst is not certain if a file is malicious or if they would like to pull out IOC's such as C2 domains the file might reach out to.

yugoslavskiy commented 3 years ago

Closing the issue as explained in https://github.com/atc-project/atc-react/issues/357.