Search Endpoints By Hash - Carbon Black Response V2

Hunt for malicious indicators using Carbon Black

Carbon Black Enterprise Response · 7 tasks · 1 input · 2 outputs

Inputs

  • Hash — MD5 Hash

Outputs

  • Endpoint.Hostname — The device hostname
  • Endpoint — The endpoint

Commands used

cb-get-processes

Flowchart

yes yes Start Start Hunt MD5 Hash - cb-get-processes Hunt MD5 Hash cb-get-processes Is Carbon Black enabled? Is Carbon Black enabled? Done Done Is there an MD5 hash to hunt? Is there an MD5 hash to h... Hunt MD5 Hunt MD5 No Integration \ No Hash No Integration \ No Hash