Analytics Commands

• getCmdAnalyticsPrevalence
• getDomainAnalyticsPrevalence
• getHashAnalyticsPrevalence
• getIPAnalyticsPrevalence
• getProcessAnalyticsPrevalence
• getRegistryAnalyticsPrevalence

getCmdAnalyticsPrevalence

---

Gets the prevalence of one or more process command lines.

Arguments

Argument Name	Description	Required
process_command_line	A comma-separated list of process command lines.	Required

Outputs

Core.AnalyticsPrevalence.Cmd.process_command_line string

The process command line.

Core.AnalyticsPrevalence.Cmd.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Cmd.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Cmd.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Cmd.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Cmd.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Cmd.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Cmd.data.prevalence.description string

A description of the prevalence metric.

getDomainAnalyticsPrevalence

---

Gets the prevalence of one or more domains.

Arguments

Argument Name	Description	Required
domain_name	A comma-separated list of domain names.	Required

Outputs

Core.AnalyticsPrevalence.Domain.domain_name string

The domain name.

Core.AnalyticsPrevalence.Domain.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Domain.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Domain.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Domain.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Domain.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Domain.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Domain.data.prevalence.description string

A description of the prevalence metric.

getHashAnalyticsPrevalence

---

Gets the prevalence of one or more files, identified by their SHA256 hashes.

Arguments

Argument Name	Description	Required
sha256	A comma-separated list of SHA256 hashes.	Required

Outputs

Core.AnalyticsPrevalence.Hash.sha256 string

The SHA256 hash.

Core.AnalyticsPrevalence.Hash.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Hash.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Hash.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Hash.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Hash.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Hash.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Hash.data.prevalence.description string

A description of the prevalence metric.

getIPAnalyticsPrevalence

---

Gets the prevalence of one or more IP addresses.

Arguments

Argument Name	Description	Required
ip_address	A comma-separated list of IP addresses.	Required

Outputs

Core.AnalyticsPrevalence.Ip.ip_address string

The IP address.

Core.AnalyticsPrevalence.Ip.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Ip.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Ip.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Ip.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Ip.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Ip.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Ip.data.prevalence.description string

A description of the prevalence metric.

getProcessAnalyticsPrevalence

---

Gets the prevalence of one or more processes, identified by their process names.

Arguments

Argument Name	Description	Required
process_name	A comma-separated list of process names.	Required

Outputs

Core.AnalyticsPrevalence.Process.process_name string

The process name.

Core.AnalyticsPrevalence.Process.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Process.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Process.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Process.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Process.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Process.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Process.data.prevalence.description string

A description of the prevalence metric.

getRegistryAnalyticsPrevalence

---

Gets the prevalence of one or more registry paths, identified by paired key and value names.

Arguments

Argument Name	Description	Required
key_name	A comma-separated list of registry key names. Must be the same length as value_name.	Required
value_name	A comma-separated list of registry value names. Must be the same length as key_name.	Required

Outputs

Core.AnalyticsPrevalence.Registry.key_name string

The registry key name.

Core.AnalyticsPrevalence.Registry.value_name string

The registry value name.

Core.AnalyticsPrevalence.Registry.value boolean

Whether the item is prevalent.

Core.AnalyticsPrevalence.Registry.data.global_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Registry.data.global_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Registry.data.local_prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Registry.data.local_prevalence.description string

A description of the prevalence metric.

Core.AnalyticsPrevalence.Registry.data.prevalence.value unknown

The prevalence value.

Core.AnalyticsPrevalence.Registry.data.prevalence.description string

A description of the prevalence metric.