genian-edr-add-malware-hash
Registers one custom Malware Hash IOC. This command changes the console, so profile is required.
genian-edr-add-malware-hash profile=VALUE hash=VALUE [file-name=VALUE] [severity=VALUE] [verdict=VALUE] [response=VALUE] [msg=VALUE] [tag=VALUE] [description=VALUE]
- profile=VALUE
- Required. Genian EDR connect profile name. Required: a change is made on exactly one console.
- hash=VALUE
- Required. MD5 (32 hex digits) or SHA256 (64 hex digits)
- file-name=VALUE
- Optional. File name of the hash
- severity=VALUE
- Optional. Severity code. Use a value existing entries (the list command) carry; the codes are defined on the console.
- verdict=VALUE
- Optional. Malware classification code. Use a value existing entries (the list command) carry; the codes are defined on the console.
- response=VALUE
- Optional. Response code. Use a value existing entries (the list command) carry; the codes are defined on the console.
- msg=VALUE
- Optional. Detection message
- tag=VALUE
- Optional. Comma separated tags
- description=VALUE
- Optional. Description
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| hash | String | Hash | e.g. 0123456789abcdef0123456789abcdef. MD5 or SHA256. |
| code | Integer | Code | e.g. 200. Result code the console answered. |
| msg | String | Message | e.g. 생성에 성공했습니다. Message the console answered. |
| details | Map | Details | e.g. {total=1, success_count=1, failed_hashes=[], duplicated_hashes=[], invalid_hashes=[]}. Counts and the entries that failed, were duplicated or invalid. |