Deprecated. No available replacement.
Carbon Black Enterprise Live Response
- Details
- Content
- Dependencies
- Version History
Collect information and take action on remote endpoints in real time with Carbon Black Enterprise Live Response.
Automations
| Name | Description |
|---|---|
| CBLiveProcessList |
Integrations
| Name | Description |
|---|---|
| VMware Carbon Black EDR (Live Response API) | Collect information and take action on remote endpoints in real time with VMware Carbon Black EDR (Live Response API) (formerly known as Carbon Black Enterprise Live Response). |
Playbooks
| Name | Description |
|---|---|
Carbon Black Live Response - Wait Until Command Complete | Polling command status until finished with an error or complete. |
| Get File Sample From Path - VMware Carbon Black EDR - Live Response API | This playbook retrieves a file from a path on an endpoint using VMware Carbon Black EDR (Live Response API). |
Carbon Black Live Response - Download File | Download file from a sensor. |
Carbon Black Live Response - Create active session | Creates an active session. |
Automations
| Name | Description |
|---|---|
| CBLiveProcessList | Deprecated. No available replacement. |
Integrations
| Name | Description |
|---|---|
| VMware Carbon Black EDR (Live Response API) | Collect information and take action on remote endpoints in real time with VMware Carbon Black EDR (Live Response API) (formerly known as Carbon Black Enterprise Live Response). |
Playbooks
| Name | Description |
|---|---|
Carbon Black Live Response - Download File | Download file from a sensor. |
Carbon Black Live Response - Wait Until Command Complete | Polling command status until finished with an error or complete. |
Carbon Black Live Response - Create active session | Creates an active session. |
| Get File Sample From Path - VMware Carbon Black EDR - Live Response API | This playbook retrieves a file from a path on an endpoint using VMware Carbon Black EDR (Live Response API). |
Required Content Packs (3)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Playbooks | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
Optional Content Packs (0)
| Pack Name | Pack By |
|---|
All level dependencies (7)
| Pack Name | Pack By |
|---|---|
| Common Playbooks | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
| Rasterize | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| Aggregated Scripts | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
1.1.3 - 2781556 (April 19, 2022)
Integrations
VMware Carbon Black EDR (Live Response API)
- Updated formatting of integration parameters.
1.1.2 - R2150739 (December 22, 2021)
Integrations
VMware Carbon Black EDR (Live Response API)
- fixed an issue where command cb-process-execute failed to run correctly.
1.1.1 - R264879 (December 28, 2020)
Playbooks
New: Get File Sample From Path - VMware Carbon Black EDR - Live Response API
- This playbook retrieves a file from the path at the endpoint using VMware Carbon Black EDR (Live Response API).
Make sure to provide the Carbon Black sensor ID of the endpoint from which you want to retrieve the file.
1.1.0 - 196091 (November 22, 2020)
Integrations
VMware Carbon Black EDR (Live Response API)
- The cb-file-get command is not longer deprecated and is available for use.
- Added the download argument to the cb-get-file-from-endpoint command. If "true" will download the file from the CarbonBlack server. Default is "true". Set to false for large files.
Playbooks
New: Carbon Black Live Response - Download File
- Download a file from a sensor.
New: Carbon Black Live Response - Wait Until Command Complete
- Polling command status until finished with an error or complete.
New: Carbon Black Live Response - Create active session
- Create an active session. If the active session already exists, will use the existing session.
1.0.2 - R180529 (November 9, 2020)
Integrations
VMware Carbon Black EDR (Live Response API)
- Renamed the integration Carbon Black Enterprise (Live) Response to VMware Carbon Black EDR (Live Response API).
1.1.3 - 2781556 (April 19, 2022)
Integrations
VMware Carbon Black EDR (Live Response API)
- Updated formatting of integration parameters.
1.1.2 - R2150739 (December 22, 2021)
Integrations
VMware Carbon Black EDR (Live Response API)
- fixed an issue where command cb-process-execute failed to run correctly.
1.1.1 - R264879 (December 28, 2020)
Playbooks
New: Get File Sample From Path - VMware Carbon Black EDR - Live Response API
- This playbook retrieves a file from the path at the endpoint using VMware Carbon Black EDR (Live Response API).
Make sure to provide the Carbon Black sensor ID of the endpoint from which you want to retrieve the file.
1.1.0 - 196091 (November 22, 2020)
Integrations
VMware Carbon Black EDR (Live Response API)
- The cb-file-get command is not longer deprecated and is available for use.
- Added the download argument to the cb-get-file-from-endpoint command. If "true" will download the file from the CarbonBlack server. Default is "true". Set to false for large files.
Playbooks
New: Carbon Black Live Response - Download File
- Download a file from a sensor.
New: Carbon Black Live Response - Wait Until Command Complete
- Polling command status until finished with an error or complete.
New: Carbon Black Live Response - Create active session
- Create an active session. If the active session already exists, will use the existing session.
1.0.2 - R180529 (November 9, 2020)
Integrations
VMware Carbon Black EDR (Live Response API)
- Renamed the integration Carbon Black Enterprise (Live) Response to VMware Carbon Black EDR (Live Response API).
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | November 9, 2020 | |
| Last Release | March 23, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
