Skip to content

New FalconSubmission

bk-cs edited this page Sep 22, 2022 · 19 revisions

New-FalconSubmission

SYNOPSIS

Submit a sample to the Falcon X Sandbox

DESCRIPTION

Requires 'Sandbox (Falcon X): Write'.

PARAMETERS

Name Type Min Max Allowed Pipeline PipelineByName Description
EnvironmentId String android
macOS_10.15
ubuntu16_x64
win7_x64
win7_x86
win10_x64
False False Analysis environment
Sha256 String False False Sha256 hash value
Url String False False A webpage or file URL
SubmitName String False False Submission name
ActionScript String default
default_maxantievasion
default_randomfiles
default_randomtheme
default_openie
False False Runtime script for sandbox analysis
CommandLine String False False Command line script passed to the submitted file at runtime
SystemDate String False False A custom date to use in the analysis environment
SystemTime String False False A custom time to use in the analysis environment
DocumentPassword String False False Auto-filled for Adobe or Office files that prompt for a password
NetworkSetting String default
tor
simulated
offline
False False Network settings to use in the analysis environment
EnableTor Boolean False False Route traffic via TOR
UserTag String[] False False Tags to categorize the submission

SYNTAX

New-FalconSubmission [-EnvironmentId] <String> [[-Sha256] <String>] [[-Url] <String>] [[-SubmitName] <String>] [[-ActionScript] <String>] [-CommandLine] <String>] [[-SystemDate] <String>] [[-SystemTime] <String>] [[-DocumentPassword] <String>] [[-NetworkSetting] <String>] [-EnableTor] <Boolean>] [[-UserTag] <String[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally