Threat Response Get Dispositions:

This script queries the Threat Response API for the disposition of any observable. If an observable is not provided as a command line argument, the script will prompt for one. An access token will be generated as needed (not found or invalid) and written to disk.

Before using you must update the following:

• CLIENT_ID
• CLIENT_PASSWORD

Usage:

python get_dispositions.py
Enter an observable: 630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da

or

python get_sha256_disposition.py 630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da

Example script output:

AMP File Reputation    2    Malicious    630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da
AMP Global Intel       2    Malicious    630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da
VirusTotal             2    Malicious    630325cac09ac3fab908f903e3b00d0dadd5fdaa0875ed8496fcbb97a558d0da