FireEye EX

Download 6
Last updated May 24, 2022

fireeye-ex-bot-commands

Fetch bot commands of specified alert from FireEye EX devices

fireeye-ex-bot-commands profile=PROFILE guid=GUID
profile=PROFILE
FireEye EX profile
guid=GUID
EX Alert UUID

Output Fields

FieldTypeNameDescription
_timeDateTime
profileStringConnect profileIdentifier of FireEye EX connect profile
domainStringDomain
dst_portIntegerService porte.g. 53, 80
signatureStringSignaturee.g. Malware.Binary.xlsx
directionStringDirectione.g. GET, POST
commandStringCommande.g. /fqiq/ HTTP/1.1
user_agentStringUser agente.g. Mozilla/4.0
rawStringRaw data