fireeye-fx-trace-files
Fetch trace files from FireEye FX devices
fireeye-fx-trace-files [profile=PROFILE] guid=GUID
- profile=PROFILE
- FireEye FX profile
- guid=GUID
- FX Alert UUID
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Profile | FireEye FX connect profile name |
| trace_type | String | Trace type | e.g. malware_malicious, replay_pcap |
| trace_file_name | String | Trace file name | e.g. GUID.malware, GUID.pnva.pcap |
| trace_file_size | Long | Trace file size | |
| md5 | String | MD5 | MD5 hash of attachment file |
| sha256 | String | SHA256 | SHA256 hash of attachment file |