Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File Name and Extension Lost After Analysis in Cortex #467

Open
Krook9d opened this issue Apr 17, 2024 · 0 comments
Open

File Name and Extension Lost After Analysis in Cortex #467

Krook9d opened this issue Apr 17, 2024 · 0 comments

Comments

@Krook9d
Copy link

Krook9d commented Apr 17, 2024

Problem Description

When analyzing a file observable with a Cortex Analyzer from TheHive, the file name and its extension are lost or changed during the process. This behavior occurs when the observable is sent to Cortex for analysis and affects the subsequent handling and analysis of the file since the original file name and extension are significant for my analyzer.

Steps to Reproduce

Create a case in TheHive and add a file observable with a specific file name and extension.
Run the Analyzer in Cortex to analyze the file observable.
After the analysis is complete, observe that the file name and extension are changed or missing in the analysis results or observable details.

Possible Solutions

If you have any suggestions on how to maintain the original file name and extension throughout the analysis process

Complementary information

Any logs or configurations that showcase this behavior will be helpful. Here is an example of what happens to the file name before and after analysis

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant