cortex_run_analyzer_file
Submit a file to any analyzer for analysis by providing a file path or base64-encoded content, enabling automated security investigations.
Instructions
Submit a file to a specific analyzer for analysis. Provide a file path or base64-encoded content.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| analyzerId | Yes | The analyzer ID to run | |
| filePath | No | Path to the file to analyze (local filesystem) | |
| fileBase64 | No | Base64-encoded file content (alternative to filePath) | |
| filename | No | Filename (required with fileBase64, auto-detected from filePath) | |
| contentType | No | MIME type of the file (default: application/octet-stream) | application/octet-stream |
| tlp | No | Traffic Light Protocol level (0=WHITE, 1=GREEN, 2=AMBER, 3=RED) | |
| pap | No | Permissible Actions Protocol level (0-3) | |
| message | No | Optional context message for the analysis |