Get the binary file from Carbon Black by its MD5 hash

This playbook retrieves a binary file by its MD5 hash from the Carbon Black telemetry data.

Carbon Black Enterprise Response · 5 tasks · 1 input · 11 outputs

Inputs

  • MD5 — MD5 hash of the binary file to be retrieved.

Outputs

  • File.Size — The size of the file.
  • File.Type — The type of the file.
  • File.Info — General information of the file.
  • File.MD5 — The MD5 hash of the file.
  • File.SHA1 — The SHA1 hash of the file.
  • File.SHA256 — The SHA256 hash of the file.
  • File.SHA512 — The SHA512 hash of the file.
  • File.SSDeep — The file SSDeep.
  • File.Name — The file name.
  • File.EntryID — File entry ID.
  • File.Extension — The file extension.

Commands used

cb-edr-binary-download

Flowchart

no yes yes Start Start Is VMware Carbon Black EDR v2 enabled? - IsIntegrationAvailable Is VMware Carbon Black ED... IsIntegrationAvailable Done Done Is the MD5 hash provided? Is the MD5 hash provided? Get the binary file from Carbon Black by its MD5 hash - cb-edr-binary-download Get the binary file from ... cb-edr-binary-download