Threat Grid

This app supports executing investigative actions to analyze executables and URLs on the Threat Grid sandbox

Supported Actions

• test connectivity: Validate the asset configuration for connectivity. This action logs into the device to check the connection and credentials
• detonate file: Run the file in the Threat Grid sandbox and retrieve the analysis results
• get report: Query for results of an already completed task in Threat Grid
• detonate url: Load a URL in the Threat Grid sandbox and retrieve the analysis results
• list playbooks: List the playbooks available in the connected ThreatGrid environment
• list submissions: List the submissions present on ThreatGrid based on the query provided