Analyze Attachments
analyze attachments provides a set of utilities for inspecting, manipulating, and extracting information from file attachments analyze attachments is a swimlane turbine connector designed to streamline the management and analysis of file attachments within security workflows it provides a comprehensive set of actions to extract metadata, calculate hashes, determine file types, check file integrity, and perform zip/unzip operationsβall without writing code by integrating analyze attachments, swimlane turbine users can automate file handling tasks, enrich incident investigations, and ensure efficient processing of attachments in playbooks this enables faster, more reliable, and scalable automation for security operations teams capabilities this connector provides the following capabilities get attachment name get attachment extension hash attachment is empty is zipfile get size zip unzip write get mimetype actions get attachment name retrieve the name of an attachment in analyze attachments using the provided attachment input input argument name type required description attachment object required attachment attachment file string optional parameter for get attachment name attachment file name string optional name of the resource input example {"attachment" {"file" "string","file name" "example name"}} output parameter type description attachment name string name of the attachment output example {"attachment name" "string"} get extension retrieve the file extension from a specified attachment name in analyze attachments input argument name type required description attachment object required attachment attachment file string optional parameter for get extension attachment file name string optional name of the resource input example {"attachment" {"file" "string","file name" "example name"}} output parameter type description extension string extension of the attachment name output example {"extension" "string"} hash attachment generate a hash value for an attachment using specified algorithms by providing the attachment as input input argument name type required description attachment object required attachment attachment file string optional parameter for hash attachment attachment file name string optional name of the resource algorithm string optional the hash algorithm input example {"attachment" {"file" "string","file name" "example name"},"algorithm" "md5"} output parameter type description hash string hash of the file output example {"hash" "string"} is empty determine whether a provided attachment is empty, returning true if it is and false otherwise input argument name type required description attachment object required attachment attachment file string optional parameter for is empty attachment file name string optional name of the resource input example {"attachment" {"file" "string","file name" "example name"}} output parameter type description is empty boolean true if the attachment is empty output example {"is empty"\ true} get mimetype & encoding identify the mimetype and encoding of an attachment file in analyze attachments using the provided attachment input input argument name type required description attachment object required attachment attachment file string optional parameter for get mimetype & encoding attachment file name string optional name of the resource input example {"attachment" {"file" "string","file name" "example name"}} output parameter type description type string type of the attachment encoding string encoding of the attachment output example {"type" "string","encoding" "string"} get size return the size of a specified attachment in bytes based on the provided attachment input input argument name type required description attachment object required attachment attachment file string optional parameter for get size attachment file name string optional name of the resource input example {"attachment" {"file" "string","file name" "example name"}} output parameter type description size number size of attachment in bytes output example {"size" 123} unzip attachment extract attachments from a provided zip file for further analysis requires an attachment input input argument name type required description attachment object required attachment zip to extract attachment file string optional parameter for unzip attachment attachment file name string optional name of the resource password string optional password of the zipfile input example {"attachment" {"file" "string","file name" "example name"},"password" "string"} output parameter type description attachments array array of attachments extracted from the zipfile attachments file string output field attachments file attachments file name string name of the resource output example {"attachments" \[]} write attachment write specified text to an attachment and return the updated attachment using the provided attachment name and text input argument name type required description attachment name string required name of the attachment text string required text to write to the attachment input example {"attachment name" "example name","text" "string"} output parameter type description attachment object output field attachment attachment file string output field attachment file attachment file name string name of the resource output example {"attachment" {"file" "string","file name" "example name"}} zip attachments retrieve the size of specified attachments in bytes using analyze attachments by providing the attachments and attachment name as inputs input argument name type required description attachments array required array of attachments extracted from the zipfile attachments file string optional parameter for zip attachments attachments file name string optional name of the resource attachment name string required name for the new zipfile password string optional password to protect the zipfile compression number optional number between 1 to 9, 1 (more fast) < > 9 (more compress) input example {"attachments" \[{"file" "string","file name" "example name"}],"attachment name" "example name","password" "string","compression" 1} output parameter type description zip object output field zip zip file string output field zip file zip file name string name of the resource output example {"zip" {"file" "string","file name" "example name"}} response headers header description example content type the media type of the resource application/json date the date and time at which the message was originated thu, 01 jan 2024 00 00 00 gmt