{% if submissions|length == 0 %}
{{ submission.file.filename }} ({{ submission.file_id }})
{% if submission.file and submission.file.comment %}File Comment: {{ submission.file.comment }}
{% endif %} {% if submission.project %}Submission project: {{ submission.project }}
{% endif %} {% if submission.comment %}Submission Comment: {{ submission.comment }}
{% endif %} {% if submission.profile %}{{submission.execution_mode}} @ {{ submission.profile.name }} (for {{submission.runtime}}s)
{% endif %} {% if submission.agent_phase %}Agent Phase: {{ submission.agent_phase }}
{% endif %} {% if submission.absorber_status %}Absorber: {{ submission.absorber_status }}
{% endif %} {% if submission.drop_path %}Malware Path: {{ submission.drop_path }}
{% endif %} {% if submission.edr_verdict %}{{ submission.edr_verdict }}
{% endif %}Created: {{ submission.created_at|strftime('%Y-%m-%d %H:%M:%S') }}
{% if submission.completed_at %}Completed: {{ submission.completed_at|strftime('%Y-%m-%d %H:%M:%S') }}
{% endif %}| Threat | Severity | Source |
|---|---|---|
| {{ alert.title }} {% if alert.source == "Defender Local" %} (DefenderDB) {% elif alert.source == "Elastic Plugin" %} {% set rule_path = alert.additional_data.rule_id|resolve_elastic_rule if alert.additional_data and alert.additional_data.rule_id else None %} {% if rule_path %} (ElasticDB) {% endif %} {% endif %} | {{ alert.severity or 'Unknown' }} | {{ alert.source or 'N/A' }} |
{{(submission.server_logs.strip().split('\n')[-5:]|join('\n')).strip()}}
{% endif %}