The way we use it is an automatic process, if a file is deemed suspicious, the file is retrieved from the endpoint with a path in the backend as the destination to download the file to. Then, this path is fed to the Symantec CAS integration to pick it up from there after which another action is executed to delete the file on the backend after been picked up successfully for detonation

Hi Rachel, I haven't used Cuckoo before but I checked out the integration. I have used Symantec CAS. You provide the path to where the file is on the Siemplify backend and it will be picked up from there by the integration for the analysis.