Connect Google BigQuery to Hybrid Analysis

Both apps 24Google BigQuery 14Hybrid Analysis 10

• Trigger
  New Job Completed

  Triggers when a BigQuery job in the project finishes, whether it succeeded or failed.

• Trigger
  New Row

  Triggers when a new row is added to a table. New rows are detected by a column you name that increases for newer rows, such as a creation time or a sequential ID.

• Trigger
  Query Job Completed (With Row Data)

  Triggers when a SELECT query job in the project finishes successfully, and includes its result rows.

• Trigger
  Updated Row

  Triggers when a row in a table is added or changed, detected by a last-updated timestamp column you name.

• Action
  Create Row

  Creates a new row of data in a table. Note: Does not create a job.

• Action
  Create Rows

  Creates new rows of data in a table (accepts line items). Note: Does not create a job.

• Action
  Delete Rows

  Deletes every row in a table whose match column equals the value you give.

• Action
  Find One Row

  Finds the first row in a table whose column equals the value you give.

• Action
  Get Rows for Job Completed

  Returns the result rows of a finished query job.

• Action
  Import Data

  Imports a JSON, CSV, Avro or Parquet file from Cloud Storage into a table. Waits up to about 40 seconds for the import to finish; larger imports keep running in BigQuery and return state RUNNING.

• Action
  List Datasets

  Returns the datasets in a Google Cloud project.

• Action
  List Tables

  Returns the tables in a BigQuery dataset.

• Action
  Run a Query

  Runs a SQL query against a table in BigQuery.

• Action
  Update Row(s)

  Updates every row in a table whose match column equals the value you give, setting the columns you choose.

• Action
  Find reports by hash

  Returns the SHA256 hashes and all sandbox detonation reports associated with the specified file hash (MD5, SHA1, SHA256 or SHA512).

• Action
  Get overview for hash

  Returns the Hybrid Analysis overview (verdict, threat score, file names, scanner results, related reports) for a file's SHA256 hash.

• Action
  Get quick scan result

  Retrieves the current result of a quick scan. Some scanners take time to finish; when finished is false, run this again later to get the final results.

• Action
  Get report state

  Returns the processing state of a sandbox report submission.

• Action
  Get report summary

  Returns the summary of a sandbox report (a submission's analysis), including verdict, threat score, hashes, signatures, MITRE ATT&CK mappings and extracted files.

• Action
  Get submission quota

  Returns the submission quota and current usage for the connected API key, for both sandbox detonations and quick scans.

• Action
  Scan file

  Submit a file to Hybrid Analysis for a quick scan by the selected scanners. Returns the quick scan id, the file's SHA256 and the scanner results so far; if finished is false, some scanners are still working.

• Action
  Search reports

  Search Hybrid Analysis sandbox reports by any combination of filename, file type, verdict, tag, AV family, host, domain, date range and other attributes.

• Action
  Submit file for analysis

  Submits a file to the Hybrid Analysis (Falcon Sandbox) for detonation in the chosen environment and returns the job id, submission id and SHA256.

• Action
  Submit URL for analysis

  Submits a website URL, or the URL of a file, to the Hybrid Analysis sandbox for analysis and returns the job and submission identifiers.

No trigger or action matches that. Ask your agent to add it: it reads the API documentation and builds what you describe.