Before
An analyst likely had to receive the file, identify or extract its hash, search for the hash in an analysis service, and determine whether a matching result existed. They then had to copy or summarize the result and send an email, or send a separate notification when no result was available.
How it works
- Receive a file through the webhook and submit its hash for analysis lookup.
- Check whether a matching file analysis is available.
- Email the analysis result or a no-result notification to the configured recipient.
Workflow details
- File Intake: The workflow starts when a file is received through a webhook, such as from a form or another submission process, and prepares the file hash for analysis.
- Hash Analysis: It submits the received hash to Hybrid Analysis to determine whether the file has already been analyzed and whether a matching result is available.
- Decision Point: The workflow checks whether a file analysis was found and routes the execution accordingly, distinguishing between an available result and a missing or unsubmitted analysis.
- Email Delivery: When a matching analysis is found, the workflow sends the analysis result by email to the configured recipient. When no result is found, it sends a separate email notification to communicate that outcome.
- Operational Result: Each submitted file follows a consistent lookup and notification path, giving the recipient an automated outcome without requiring someone to search for the hash and compose the follow-up email manually.
What changed
The hash lookup, found-or-not-found decision, and email handoff now occur automatically after file receipt. The recipient receives the appropriate outcome without waiting for a person to complete the search and notification steps.
Work removed
Manually searching for each file hash, checking whether a matching analysis exists, copying or summarizing the result, and sending the corresponding email notification.
Expected outcome
Typically removes at least one manual lookup and one manual email action per submitted file, while ensuring each file receives a consistent outcome notification.
