FortiSandbox

Details

Author	Energy SOAR
Version	1.0
License	AGPL-V3
Requires Registration	No
Requires Subscription	No
Free Subscription Available	No
DataType Supported	energysoar:case_artifact:file, url, hash

Description

Perform operational actions in FortiSandbox from Energy SOAR workflows. Typical responder operations may include submitting a file or URL for sandbox execution, triggering a re-scan, querying job state as part of automation, or promoting a confirmed malicious sample into a blocking or investigation workflow.

Configuration

Name	Description
base_url	FortiSandbox URL
api_key	API key or token for FortiSandbox
verify_ssl	Verify server certificate
submission_profile	Optional FortiSandbox execution or analysis profile
polling_interval	Time interval between job status checks