Skip to content

New FalconSubmission

bk-cs edited this page Sep 22, 2022 · 19 revisions

New-FalconSubmission

SYNOPSIS

Submit a sample to the Falcon X Sandbox

DESCRIPTION

Requires 'Sandbox (Falcon X): Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
EnvironmentId String android
macOS_10.15
ubuntu16_x64
win7_x64
win7_x86
win10_x64
False False Analysis environment
Sha256 String ^[A-Fa-f0-9]{64}$ False False Sha256 hash value
Url String False False A webpage or file URL
SubmitName String False False Submission name
ActionScript String default
default_maxantievasion
default_randomfiles
default_randomtheme
default_openie
False False Runtime script for sandbox analysis
CommandLine String False False Command line script passed to the submitted file at runtime
SystemDate String ^\d{4}-\d{2}-\d{2}$ False False A custom date to use in the analysis environment
SystemTime String ^\d{2}:\d{2}$ False False A custom time to use in the analysis environment
DocumentPassword String False False Auto-filled for Adobe or Office files that prompt for a password
NetworkSetting String default
tor
simulated
offline
False False Network settings to use in the analysis environment
EnableTor Boolean False False Route traffic via TOR
UserTag String[] False False Tags to categorize the submission

SYNTAX

New-FalconSubmission [-EnvironmentId] <String> [[-Sha256] <String>] [[-Url] <String>] [[-SubmitName] <String>] [-ActionScript] <String>] [[-CommandLine] <String>] [[-SystemDate] <String>] [[-SystemTime] <String>] [-DocumentPassword] <String>] [[-NetworkSetting] <String>] [[-EnableTor] <Boolean>] [[-UserTag] <String[]>] [-WhatIf] -Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally