This Torq workflow template, "Attach a password protected archive to a Torq Case," enables users to securely manage case attachments by fetching a suspicious file from a provided tqfile, zipping it with password protection, and attaching the protected zip file to a specified case. This ensures that sensitive case materials are handled safely and that malicious content is contained during incident response activities. The default password for the archive is 'infected', but this can be customized to enhance security protocols within the team's workflow.
Use Cases
Case Management , Function
Workflow Breakdown
Receives a tqfile and fetch the suspicious file.
Files is zipped and password protected.
Zip file is attached to the case.
Vendors
Utils, HTTP, Torq Cases
Tips
Default password is 'infected' and can be customized at trigger parameters.