๐Ÿ”’ Private Files Behaviours

Information about private file behaviours

๐Ÿšง

Special privileges required

Private Scanning endpoints are only available to users with Private Scanning license.

Private file behaviours are identical to file behaviours, but they summarize the behaviour of a private file. They can be only seen by the users who uploaded the original file.

Additional attributes

  • html_report_link: <string> download URL of the reports's HTML report (if present).
  • pcap_link: <string> download URL of the report's PCAP file (if present).
  • evtx_link: <string> download URL of the report's EVTX file (if present).
  • memdump_link: <string> download URL of the report's memdump file (if present).

Relationships

In addition to the previously described attributes, private file behaviour objects contain relationships with other objects in our dataset that can be retrieved as explained in the Relationships section.

The following table shows a summary of available relationships.

RelationshipReturn object type
attack_techniquesList of Attack Techniques
fileA single Private File