The scheduled search "WildFire Reports - Retrieve Report" queries Wildfire using the API to retrieve the full Wildfire report. However it does this for benign and malicious files. This uses our 10,000 query limit by 8am.
I would only like to automatically retrieve the full wildfire report for malicious files.
How would you recommend implementing this?
... View more