Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/any.run.png')} alt="any.run" width="80"/>

***Version: 1.3
Updated: Jun 15, 2023***
***Version: 1.4
Updated: Feb 04, 2025***

Gather detonation data for files and URL using `ANY.RUN`.

Expand All @@ -23,8 +23,8 @@ Sign in to ANY.RUN. Click on your profile on the left menu. In the API and Limit

## ANY.RUN in Automation Service and Cloud SOAR

1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
1. After the list of the integrations appears, search for the integration and click on the row.
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
1. After the list of the integrations appears, search for the integration and click on the row.
1. The integration details will appear. Click on the **"+"** button to add new Resource.<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/any.run/any.run-3.png')} style={{border:'1px solid gray'}} alt="any.run-3" width="400"/>
1. Populate all the required fields (\*):
* **URL**. 'https://api.any.run'
Expand All @@ -39,3 +39,4 @@ Sign in to ANY.RUN. Click on your profile on the left menu. In the API and Limit
* February 21, 2020 - First upload
* February 13, 2023 - Integration refactored
* June 15, 2023 (v1.3) - Updated the integration with Environmental Variables
* February 04, 2025 (v1.4) - Updated the action Get Report with Environmental Variables
Original file line number Diff line number Diff line change
Expand Up @@ -6,36 +6,37 @@ import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/aws.png')} alt="aws" width="50"/>

***Version: 1.4
Updated: July 04, 2024***
***Version: 1.5
Updated: Feb 04, 2025***

Using the integration with EC2, you can enrich incidents with specific EC2 data, create and delete snapshots, work with elastic addresses and instances, and manipulate security groups.

## Actions

* **Describe Regions** (*Enrichment*) - Describes the Regions that are enabled for an account, or all Regions.
* **Describe Instances** (*Enrichment*) - Describes the specified instances or all of AWS account's instances.
* **Authorize Security Group Ingress Rule** (*Containment*) - Adds the specified ingress rules to a security group.
* **Create Snapshot** (*Containment*) - Creates a new snapshot.
* **Delete Security Group** (*Containment*) - Delete a security group.
* **Delete Snapshot** (*Containment*) - Deletes an existing snapshot.
* **Describe Addresses** (*Enrichment*) - Describes the specified Elastic IP addresses or all Elastic IP addresses.
* **Describe Volumes** (*Enrichment*) - Describes the specified EBS volumes or all EBS volumes.
* **Describe Instances** (*Enrichment*) - Describes the specified instances or all of AWS account's instances.
* **Describe Instances V2** (*Enrichment*) - Describes the specified instances or all of AWS account's instances with pagination.
* **Describe Key Pairs** (*Enrichment*) - Describes the specified key pairs or all key pairs.
* **Describe VPCs** (*Enrichment*) - Describes one or more VPCs.
* **Describe Regions** (*Enrichment*) - Describes the Regions that are enabled for an account, or all Regions.
* **Describe Subnets** (*Enrichment*) - Describes one or more subnets.
* **Describe Security Groups** (*Enrichment*) - Describes the specified security groups or all security groups.
* **Describe Snapshots** (*Enrichment*) - Describes a specified EBS snapshots or all of the EBS snapshots available.
* **Get Password Data** (*Enrichment*) - Retrieves the encrypted administrator password for a running Windows instance.
* **Create Snapshot** (*Containment*) - Creates a new snapshot.
* **Delete Snapshot** (*Containment*) - Deletes an existing snapshot.
* **Describe Volumes** (*Enrichment*) - Describes the specified EBS volumes or all EBS volumes.
* **Describe VPCs** (*Enrichment*) - Describes one or more VPCs.
* **Disassociate Address** (*Containment*) - Disassociates an Elastic IP address from an instance or network interface it's associated with.
* **Get Password Data** (*Enrichment*) - Retrieves the encrypted administrator password for a running Windows instance.
* **Monitor Instance** (*Containment*) - Monitor a specific instance.
* **Release Address** (*Containment*) - Releases the specified Elastic IP address.
* **Reboot Instances** (*Containment*) - Reboot instances.
* **Revoke Security Group Ingress Rule** (*Containment*) - Removes the specified ingress rules from a security group.
* **Start Instance** (*Containment*) - Start an instance.
* **Stop Instance** (*Containment*) - Stop an instance.
* **Terminate Instance** (*Containment*) - Terminate an instance.
* **Delete Security Group** (*Containment*) - Delete a security group.
* **Monitor Instance** (*Containment*) - Monitor a specific instance.
* **Unmonitor Instances** (*Containment*) - Discontinue monitoring of a specified instances.
* **Reboot Instances** (*Containment*) - Reboot instances.
* **Authorize Security Group Ingress Rule** (*Containment*) - Adds the specified ingress rules to a security group.
* **Revoke Security Group Ingress Rule** (*Containment*) - Removes the specified ingress rules from a security group.

**Supported Versions**

Expand All @@ -54,4 +55,5 @@ Using the integration with EC2, you can enrich incidents with specific EC2 data,
+ Updated action: Stop Instance (Resolved bug related to checkbox fields)
+ July 04, 2024 (v1.4)
+ Updated action: Describe Instances (Resolved bug related to Instance ID field)

+ February 04, 2025 (v1.5)
+ Added action: Describe Instances V2