Skip to main content

Cyware Orchestrate

PolySwarm

App Vendor: PolySwarm

App Category: Data Enrichment & Threat Intelligence

Connector Version: 1.0.0

API Version: 2.0.0

About App

PolySwarm is a threat intelligence marketplace, that gives you an effective way to detect, analyze, and respond to the latest threats. PolySwarm is powered by a network of commercial threat detection engines. This allows PolySwarm to detect threats earlier than the competition.

The PolySwarm app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

List Scans for a Hash

The action retrieves a list of scan results for the specified hash.

Get Hash Details

The action retrieves the details of the specified hash.

Get URL Details

The action retrieves the details of the specified URL.

Scan URL

This action scans the specified URL and retrieves details of the URL, if available.

Configuration Parameters

The following configuration parameters are required for the PolySwarm app to communicate with the PolySwarm enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

API Token

Enter your PolySwarm API token.

Example:

317b21cb093263b701043cb0831a53b9

Password

Required

Action: List Scans for a Hash

The action retrieves a list of scan results for the specified hash.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Hash

Enter the hash for which you want to retrieve scan results.

Example:

34dccdd26c5c99ceb3af22f392b708bf

Text

Optional

Example Request

[
  {
    "hash": "88a8b10e503a2edc25c4f12745720d86992b73074af6b8d12b82d240d14235c8"
  }
]
Action: Get Hash by ID

The action retrieves the details of the specified hash.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Hash

Enter the hash for which you want to retrieve details

Example:

34dccdd26c5c99ceb3af22f392b708bf

Text

Required

Hash Type

Enter the hash type.

Example:

md5

Text

Required

Allowed values:

  • md5

  • sha256

  • sha1

Example Request

[
  {
    "hash": "34dccdd26c5c99ceb3af22f392b708bf",
    "hash_type": "md5"
  }
]
Action: Get URL Details

The action retrieves the details of the specified URL.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

URL

Enter the URL for which you want to retrieve details.

Example:

https://www.google.com/

Text

Required

Example Request

[
  {
    "url": "https://www.google.com/"
  }
]
Action: Scan URL

This action scans the specified URL and retrieves details of the URL, if available.

Details of the URL can be retrieved using the Get URL Details API.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

URL

Enter the URL that you want to submit to PolySwarm to be scanned.

Example:

https://www.google.com/

Text

Required

Example Request

[
  {
    "url": "https://www.google.com/"
  }
]