Carbon Black EDR - Enrich Process

Test Playbook for Carbon Black EDR

Pack

Carbon_Black_Enterprise_Response

Tasks

4

Inputs

• Process ID — The ID of the requested process.
• Segment ID — The ID of the segment of the requested process.
• Enrich with related processes? — Whether the data fetched should include related processes (parent, sibling and child processes) if available?

Commands used

• cb-edr-process-get