Cyware Orchestrate

The following configuration parameters are required for the VMRay Analyzer app to communicate with the VMRay Analyzer enterprise application. The parameters can be configured by creating instances in the app.

This action creates a sample relation between two samples (identified as parent and child samples) that may be related to each other. The parent sample is identified by the submission_id and the child sample by its sample_id.

Action Input Parameters 

Example Request 

[
    {
        "relation": "Downloaded File",
        "sample_id": 35167,
        "submission_id": 6307
    }
]

This action retrieves all the YARA rulesets.

Action Input Parameters 

This action does not require any input parameters.

This action retrieves all or specific Virustotal analysis in the system. The Virustotal analysis is based on suspicious files and URLs to detect types of malware.

Action Input Parameters 

Example Request 

[
    {
       
        "virustotal_analysis_id": 9854123
    }
]

This action retrieves all or specific reputation analysis in the system. This reputation analysis helps in identifying known good or bad files.

Action Input Parameters 

Example Request 

[
    {
       
        "reputation_lookup_id": 876111
    }
]

This action retrieves static and dynamic analysis in the system. Static analysis helps in detecting active elements that could mean a threat is near. The dynamic analysis helps in digging deep to reveal and block any suspicious malware behavior.

Action Input Parameters 

Example Request 

[
    {
       
        "analysis_id": 3516
    }
]

This action retrieves the mitre attack techniques in a sample. Mitre attack techniques is a knowledge base of tactics and techniques based on real world observations of security threats.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 35167
    }
]

This action retrieves the VMRay threat identifiers of a sample.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 764254
    }
]

This action retrieves the report of a sample in PDF format.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 35167
    }
]

This action retrieves the indicators of compromise of a sample in STIX format.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 676365
    }
]

This action retrieves the indicators of compromise of a sample in CSV format.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 676365
    }
]

This action retrieves the indicators of compromise of a sample in default JSON format.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 676365
    }
]

This action retrieves all the submission details.

Action Input Parameters 

This action does not require any input parameters.

This action retrieves the metadata of a sample using the sample ID, such as sample_score, sample_highest_vti_score, sample_last_reputation_severity, sample_last_md_score, or sample_last_vt_score.

Action Input Parameters 

Example Request 

[
    {
        "sample_id": 676365
    }
]

This action submits a sample file for analysis.

Action Input Parameters 

Example Request 

[
    {
        "filepath": "/tmp/examplefilepath/examplefile.txt"
    }
]

This action retrieves all the submission IDs.

Action Input Parameters 

This generic action transcends the actions implemented by making a request to any endpoint.

Action Input Parameters