show wildfire local

Description

Shows various information about local devices and samples, activity, recent samples that the appliance analyzed, and basic WildFire statistics.

Hierarchy Location

show wildfire local

Syntax

latest { analysis { filter malicious|benign; sort-by SHA256|Submit Time|Start Time|Finish Time|Malicious|Status; sort-direction asc|desc; limit 1-20000; days 1-7; } OR... samples { filter malicious|benign; sort-by SHA256|Create Time|File Name|File Type|File Size|Malicious|Status; sort-direction asc|desc; limit 1-20000; days 1-7; } sample-status { sha256 { equal <value>; } } statistics days <1-31> | hours <0-24> | minutes <0-60>; }

Options

> latest
— Show latest 30 activities, which include the last 30 analysis activities, the last 30 files that were analyzed, network session information on files that were analyzed and files that were uploaded to the public cloud server.
> sample-status
— Show wildfire sample status. Enter the SHA256 value of the file to view the current analysis status.
> statistics
— Display basic wildfire statistics.

Sample Output

The following shows the output for this command.
admin@WF-500>
show wildfire latest analysis
Latest analysis information: +-------------+---------------------+---------------------+---------------------+ | SHA256 | Submit Time | Start Time | Finish Time | +-------------+---------------------+---------------------+---------------------+ | <HASH VALUE>| 2017-03-01 14:28:26 | 2017-03-01 14:28:26 | 2017-03-01 14:34:24 | | <HASH VALUE>| 2017-03-01 14:28:25 | 2017-03-01 14:28:25 | 2017-03-01 14:28:41 | | <HASH VALUE>| 2017-03-01 14:28:25 | 2017-03-01 14:28:25 | 2017-03-01 14:28:26 | +-------------+---------------------+---------------------+---------------------+ +------------+-----------------------------------------------------------+-----------+ | Malicious | VM Image | Status | +------------+-----------------------------------------------------------+-----------+ | Yes | Windows 7 x64 SP1, Adobe Reader 11, Flash 11, Office 2010 | completed | | No | Java/Jar Static Analyzer | completed | | Suspicious | Java/Jar Static Analyzer | completed | +------------+-----------------------------------------------------------+-----------+ admin@WF-500>
show wildfire latest samples
Latest samples information: +--------------+---------------------+----------------+---------------+ | SHA256 | Create Time | File Name | File Type | +--------------+---------------------+----------------+---------------+ | <HASH VALUE> | 2017-03-01 14:28:25 | | JAVA Class | | <HASH VALUE> | 2017-03-01 14:28:25 | | JAVA Class | | <HASH VALUE> | 2017-03-01 14:28:25 | | PE | +--------------+---------------------+----------------+---------------+ +--------------+-----------+-------------------+ | File Size | Malicious | Status | +--------------+-----------+-------------------+ | 20,407 | No | analysis complete | | 1,584 | Yes | analysis complete | | 259,024 | No | analysis complete | +--------------+-----------+-------------------+ admin@WF-500>
show wildfire local sample-status sha256 equal 0f2114010d00d7fa453177de93abca9643f4660457536114898c56149f819a9b
Sample information: +---------------------+-----------+-----------------------------------+ | Create Time | File Name | File Type | +---------------------+-----------+-----------------------------------+ | 2017-03-01 22:28:24 | rmr.doc | Microsoft Word 97 - 2003 Document | +---------------------+-----------+-----------------------------------+ +-----------+-----------+-------------------+ | File Size | Malicious | Status | +-----------+-----------+-------------------+ | 133120 | Yes | analysis complete | +-----------+-----------+-------------------+ Analysis information: +---------------------+---------------------+---------------------+------------+ | Submit Time | Start Time | Finish Time | Malicious | +---------------------+---------------------+---------------------+------------+ | 2017-03-01 22:28:24 | 2017-03-01 22:28:24 | 2017-03-01 22:28:24 | Suspicious | | 2017-03-01 22:28:24 | 2017-03-01 22:28:24 | 2017-03-01 22:34:07 | Yes | +---------------------+---------------------+---------------------+------------+ +-----------------------------------------------------------+-----------+ | VM Image | Status | +-----------------------------------------------------------+-----------+ | DOC/CDF Static Analyzer | completed | | Windows 7 x64 SP1, Adobe Reader 11, Flash 11, Office 2010 | completed | +-----------------------------------------------------------+-----------+ admin@WF-500>
show wildfire local statistics
Current Time: 2017-03-01 17:44:31 Received After: 2017-02-28 17:44:31 Received Before: 2017-03-01 17:44:31 ------------------------------------------------------------------------------------- | Wildfire Stats | +-----------------------------------------------------------------------------------+ |+----------------------------------------------------------------------------------+| || Executable || |+---------------------------------------------------------------------------------+| || FileType | Submitted | Analyzed | Pending | Malware | Grayware | Benign | Error || |+---------------------------------------------------------------------------------+| || exe | 2 | 2 | 0 | 0 | 0 | 2 | 0 || |+---------------------------------------------------------------------------------+| || dll | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| Environment Analysis Summary for Executable: VM Utilization : 0/10 Files Analyzed : 2 +-----------------------------------------------------------------------------------+ || Non-Executable || |+---------------------------------------------------------------------------------+| || FileType | Submitted | Analyzed | Pending | Malware | Grayware | Benign | Error || |+---------------------------------------------------------------------------------+| || pdf | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || jar | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || doc | 1 | 1 | 0 | 1 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || ppt | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || xls | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || docx | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || pptx | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || xlsx | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || rtf | 0 | 0 | 0 | 0 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| || class | 2 | 2 | 0 | 1 | 0 | 1 | 0 || |+---------------------------------------------------------------------------------+| || swf | 1 | 1 | 0 | 0 | 0 | 1 | 0 || |+---------------------------------------------------------------------------------+| Environment Analysis Summary for Non-Executable: VM Utilization : 0/16 Files Analyzed : 4 +-----------------------------------------------------------------------------------+ || Links || |+---------------------------------------------------------------------------------+| || FileType | Submitted | Analyzed | Pending | Malware | Grayware | Benign | Error || |+---------------------------------------------------------------------------------+| || elink | 1 | 1 | 0 | 1 | 0 | 0 | 0 || |+---------------------------------------------------------------------------------+| Environment Analysis Summary for Links: Files Analyzed : 1 ---------------------------------------------------------- | General Stats | +--------------------------------------------------------+ Total Disk Usage: 67/1283(GB) (5%) ||+--------------------------+-----------+-+-----------+|| ||| Sample Queue ||| ||+-----------------+-------------------+--------------+|| ||| SUBMITTED | ANALYZED | PENDING ||| ||+--------------------------+-----------+-+-----------+|| ||| 7 | 7 | 0 ||| ||+--------------------------+-----------+-+----------+||| |+---------------------------+--------------------------+| ||| Verdicts ||| ||+--------------------------+-------------------------+|| ||| Malware | Grayware | Benign | Error ||| ||+-----------------------------+----------------------+|| ||| 3 | 0 | 4 | 0 ||| ||+--------------------------+-----------+-+----------+||| |+---------------------------+--------------------------+| ||| Session and Upload Count ||| ||+--------------------------+-------------------------+|| ||| Sessions | Uploads ||| ||+--------------------------+-------------------------+|| ||| 7 | 5 ||| ||+--------------------------+-------------------------+||

Required Privilege Level

superuser, superreader

Related Documentation