Get the binary file from Carbon Black by its MD5 hash

This playbook retrieves a binary file by its MD5 hash from the Carbon Black telemetry data.

Pack

Carbon_Black_Enterprise_Response

Tasks

5

Inputs

• MD5 — MD5 hash of the binary file to be retrieved.

Outputs

• File.Size — The size of the file.
• File.Type — The type of the file.
• File.Info — General information of the file.
• File.MD5 — The MD5 hash of the file.
• File.SHA1 — The SHA1 hash of the file.
• File.SHA256 — The SHA256 hash of the file.
• File.SHA512 — The SHA512 hash of the file.
• File.SSDeep — The file SSDeep.
• File.Name — The file name.
• File.EntryID — File entry ID.
• File.Extension — The file extension.

Commands used

• cb-edr-binary-download