CarbonBlackProtectionV2

VMware Carbon Black App Control (formerly known as Carbon Black Enterprise Protection) is a next-generation endpoint threat prevention solution to deliver a portfolio of protection policies, real-time visibility across environments, and comprehensive compliance rule sets in a single platform. This integration only supports Carbon Black on-premise APIs.

Category

Endpoint

Pack

CarbonBlackProtect

Configuration parameters

• url — Server URL (e.g. https://192.168.0.1) (required)
• api_token —
• fetch_time — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• incidents_per_fetch — Max incidents per fetch
• fetch_query — Fetch query
• token — API Token
• isFetch — Fetch incidents
• incidentType — Incident type
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• incidentFetchInterval — Incidents Fetch Interval

Commands (27)

• cbp-approvalRequest-resolve — Resolves a file approval request.
• cbp-approvalRequest-search — Search for approval requests. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#approvalrequest
• cbp-computer-get — Returns information for a computer. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#computer
• cbp-computer-search — Search for computers. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#computer
• cbp-computer-update — Updates computer objects. Note that some computer properties can be changed only if specific boolean parameters are set. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#computer
• cbp-connector-get — Returns the object instance of this class.
• cbp-connector-search — Returns objects that match the specified criteria.
• cbp-event-search — Search for events. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#event
• cbp-fileAnalysis-createOrUpdate — Creates or updates a file analysis request.
• cbp-fileAnalysis-get — Returns the object instance of this class.
• cbp-fileAnalysis-search — Returns objects that match the specified criteria.
• cbp-fileCatalog-search — Search for file catalogs. See more: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filecatalog
• cbp-fileInstance-search — Search for file instances. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#fileinstance
• cbp-fileRule-createOrUpdate — Creates or updates a file rule. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filerule
• cbp-fileRule-delete — Deletes the file rule. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filerule
• cbp-fileRule-get — Gets the file rule. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filerule
• cbp-fileRule-search — Search for file rules. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filerule
• cbp-fileRule-update — Creates or updates file rule. See more: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#filerule
• cbp-fileUpload-createOrUpdate — Creates or updates a file upload request.
• cbp-fileUpload-download — Returns the bject instance of this class.
• cbp-fileUpload-get — Returns the object instance of this class.
• cbp-fileUpload-search — Returns objects that match the specified criteria.
• cbp-policy-search — Search for policies. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#policy
• cbp-publisher-search — Search for publishers. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#publisher.
• cbp-serverConfig-search — Search in server configurations. For more information, see the Carbon Black documentation: https://developer.carbonblack.com/reference/enterprise-protection/8.0/rest-api/#serverconfig.
• cbp-user-data-get — Retrieve all user account data.
• cbp-user-disable — Sends request to disable user account.