soar
Trellix Malware Analysis
Splunk SOAR Cloud
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
This app provides connectivity to the Trellix Advanced Malware Analysis tool
Supported Actions Version 1.0.3
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get profiles: Return available operating system profiles from Trellix console
- detonate file: Run a file in the sandbox and retrieve the analysis results
- detonate url: Run a URL in the sandbox
- get report: Get results of an already completed detonation
- save artifacts: Save a ZIP file of the detonation report to the Vault
- get status: Gets the status of a detonation report
Supported Actions Version 1.0.2
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get profiles: Return available operating system profiles from Trellix console
- detonate file: Run a file in the sandbox and retrieve the analysis results
- detonate url: Run a URL in the sandbox
- get report: Get results of an already completed detonation
- save artifacts: Save a ZIP file of the detonation report to the Vault
- get status: Gets the status of a detonation report
Supported Actions Version 1.0.1
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get profiles: Return available operating system profiles from Trellix console
- detonate file: Run a file in the sandbox and retrieve the analysis results
- detonate url: Run a URL in the sandbox
- get report: Get results of an already completed detonation
- save artifacts: Save a ZIP file of the detonation report to the Vault
- get status: Gets the status of a detonation report
Release Notes
Version 1.0.3
April 11, 2025
- Update Python dependencies for vulnerabilities, package updates, and platform built-in removals
- Update Python dependencies for Python 3.13 support
- Update NOTICE file with updated dependencies
- Apply pre-commit fixes
Version 1.0.2
Feb. 21, 2023
- Added contains for 'detonate file' action
Version 1.0.1
Feb. 16, 2023
- Initial release as a community app