Carbon Black Live Response - Download File

Download file from a sensor.

Pack

Carbon_Black_Enterprise_Live_Response

Tasks

8

Inputs

• SensorId — Sensor ID.
• Path — File path to download.

Outputs

• File.Size — File size.
• File.SHA1 — File SHA1.
• File.SHA256 — File SHA256.
• File.Name — File name.
• File.SSDeep — File SSDeep.
• File.EntryID — File EntryID.
• File.Info — File info.
• File.Type — File type.
• File.MD5 — File MD5.
• File.Extension — File extension.

Commands used

• cb-command-info
• cb-file-get
• cb-get-file-from-endpoint
• cb-session-close