cortex_run_analyzer_file
Submit a file to an analyzer for security analysis. Provide the file path or base64-encoded content to trigger the analysis.
Instructions
Submit a file to a specific analyzer for analysis. Provide a file path or base64-encoded content.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pap | No | Permissible Actions Protocol level (0-3) | |
| tlp | No | Traffic Light Protocol level (0=WHITE, 1=GREEN, 2=AMBER, 3=RED) | |
| message | No | Optional context message for the analysis | |
| filePath | No | Path to the file to analyze. Confined to the CORTEX_FILE_BASE_DIR directory; paths outside it (or filesystem reads when CORTEX_FILE_BASE_DIR is unset) are refused. Use fileBase64 for arbitrary content. | |
| filename | No | Filename (required with fileBase64, auto-detected from filePath) | |
| analyzerId | Yes | The analyzer ID to run | |
| fileBase64 | No | Base64-encoded file content (alternative to filePath) | |
| contentType | No | MIME type of the file (default: application/octet-stream) | application/octet-stream |