CBPBanHash

Deprecated. Use the cbp-fileRule-createOrUpdate command instead.

Type
python
Pack
CarbonBlackProtect

Source

import demistomock as demisto  # noqa: F401
from CommonServerPython import *  # noqa: F401

CBP_HASH_BANNED = '3'
res = []
t = []
for h in argToList(demisto.args()['hash']):
    e = demisto.executeCommand("cbp-fileRule-createOrUpdate", {"fileState": CBP_HASH_BANNED, "hash": h})[0]
    if isError(e):
        res += [e]
    else:
        t.append(e['Contents'])

res.append({'ContentsFormat': formats['table'], 'Type': entryTypes['note'], 'Contents': t})
demisto.results(res)

README

Bans/block lists a hash in CBEP/Bit9.

Script Data

Name Description
Script Type python
Tags carbon-black-protection, bit9

Dependencies

This script uses the following commands and scripts.

Inputs

Argument Name Description
hash The hash value(s) to ban (comma-separated).

Outputs

There are no outputs for this script.