Carbon Black Live Response - Download File

Download file from a sensor.

Carbon Black Enterprise Live Response · 8 tasks · 2 inputs · 10 outputs

Inputs

SensorId — Sensor ID.
Path — File path to download.

Outputs

File.Size — File size.
File.SHA1 — File SHA1.
File.SHA256 — File SHA256.
File.Name — File name.
File.SSDeep — File SSDeep.
File.EntryID — File EntryID.
File.Info — File info.
File.Type — File type.
File.MD5 — File MD5.
File.Extension — File extension.

Commands used

cb-command-info cb-file-get cb-get-file-from-endpoint cb-session-close

Flowchart