Carbon Black EDR - Enrich Process

Test Playbook for Carbon Black EDR

Carbon Black Enterprise Response · 4 tasks · 3 inputs · 0 outputs

Inputs

  • Process ID — The ID of the requested process.
  • Segment ID — The ID of the segment of the requested process.
  • Enrich with related processes? — Whether the data fetched should include related processes (parent, sibling and child processes) if available?

Commands used

cb-edr-process-get

Flowchart

yes Start Start Is instance valid? Is instance valid? Enrich Process - cb-edr-process-get Enrich Process cb-edr-process-get Done. Done.