Use the FortiSandbox Send to Analysis remediation action to send a file to FortiSandbox for malware analysis. This procedure was verified on FortiSandbox version 4.2.1.In the current Beta version, the SOAR remediation actions are provided as scripts, per customer request. For more information, contact Cynet.You must store your FortiSandbox credentials in the Security Vault before creating a new Custom Remediation action. In the newly created vault object:For name and key enter: FortiSandbox AccountActivate the vault object and enable agent remediation Add the following variables (it is recommended to encrypt and mask the password):NameFortiSandbox userFortiSandbox passwordKeyUserPasswordValueYour FortiSandbox usernameYour FortiSandbox passwordNow you must create a new Custom Remediation action using the following parameters:FieldValueAction NameSend to FortiSandboxRemediation CategoryFileExecution LocationEndpointFile for ExecutionUpload the script you received from CynetArguments for ExecutionSee belowArgumentsYou must enter all the arguments, in the order in which they appear TypeArgumentPrefixDynamicFilePath--filepathStaticFortiSandbox IP--ipVaultFortiSandbox Account--userVaultFortiSandbox Account--pwdIn the Actions page, you can check if the file was sent successfully. For the analysis results, navigate to FortiSandbox.