Search Endpoints By Hash - Carbon Black Protection
Hunt for endpoint activity involving hash IOCs, using Carbon Black Protection.
- Pack
- CarbonBlackProtect
- Tasks
- 9
Inputs
- Hash — The MD5 Hash to hunt for
Outputs
- Endpoint.Hostname — The device hostname
- Endpoint — The endpoint
Commands used
- cbp-computer-get