This Torq workflow template enables teams to analyze and validate the security of URLs and files by submitting them to Recorded Future Sandbox. Lists of URLs (as 'urls_list') are assessed as website links, while URLs pointing to files (as 'files_url_list') are downloaded and examined within the sandbox environment. The workflow prioritizes threat intelligence enrichment by providing detailed analysis output, ensuring only valid URLs are processed, thus bolstering an organization's defense against potential cyber threats.
Optional Triggers
"This workflow can be used as a nested function."
Use Cases
Function, Threat Intelligence Enrichment
Workflow Breakdown
URLs in the urls_list are submitted as URLs and are analyzed as a website.
URLs in the files_url_list are downloaded and are analyzed as a file in the sandbox.
Both lists are verified to have valid URLs, other values are removed.
Vendors
Utils, Recorded Future Sandbox
Workflow Output
Output contains all analysis related information for each sample.