The Get File Metadata Alert Action retrieves file metadata, such as the nuber of devices upon which the hash was observed using the specified SHA-256 file hash.

Note: See also Unified Binary REST API Reference.

Configuration:

File Hash Field
The field name in the search results that contains the SHA-256 hash of the object in question.