Find sandbox reports
-Filter
: Optional filter and sort criteria in the form of an FQL query
-Limit
: The maximum records to return [default: 5000]
-Offset
: The offset to start retrieving records from [default: 0]
-All
: Repeat request until all results are returned
PS> Get-CsAnalysisId
Get a short summary version of a sandbox report
-Id
: ID of one or more summaries
PS> Get-CsAnalysisInfo -Id @(<string>, <string>)
Find submission IDs for uploaded files
-Filter
: Optional filter and sort criteria in the form of an FQL query
-Limit
: The maximum records to return [default: 5000]
-Offset
: The offset to start retrieving records from [default: 0]
-All
: Repeat request until all results are returned
PS> Get-CsSubmissionId
Check the status of a sandbox analysis
-Id
: Id of a submitted malware sample
PS> Get-CsSubmissionInfo -Id @(<string>, <string>)
Get your current Falcon X quota status
PS> Get-CsSubmissionQuota
Upload a file for sandbox analysis
-Path
: The full path to the file to upload
-Comment
: A descriptive comment to identify the file for other users
-Confidential
: Defines visibility of this file in Falcon MalQuery [default: True]
PS> New-CsSample -Path <string>
Download IOC packs, PCAP files, and other analysis artifacts
-Id
: ID of an artifact, such as an IOC pack, PCAP file or actor image
-Path
: Destination path
-Name
: The name given to your downloaded file
PS> Receive-CsArtifact -Id <string> -Path <string>
Submit an uploaded file or a URL for sandbox analysis. Time required for analysis varies but is usually less than 15 minutes
-Sandbox
: An array of Sandbox submission properties
PS> Submit-CsSample -Sandbox @(@{})