Threat Grid

This app supports executing investigative actions to analyze executables and URLs on the Threat Grid sandboxBuilt by Splunk LLC

Default Version 2.1.8

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating

(0)

Support

Splunk Supported

Ranking

#1 in Sandbox

This app supports executing investigative actions to analyze executables and URLs on the Threat Grid sandbox

Supported actions

test connectivity: Validate the asset configuration for connectivity. This action logs into the device to check the connection and credentials
detonate file: Run the file in the Threat Grid sandbox and retrieve the analysis results
get report: Query for results of an already completed task in Threat Grid
detonate url: Load a URL in the Threat Grid sandbox and retrieve the analysis results
list playbooks: List the playbooks available in the connected ThreatGrid environment
list submissions: List the submissions present on ThreatGrid based on the query provided