Block Endpoint - Carbon Black Response Deprecated

Deprecated. Use the `Block Endpoint - Carbon Black Response V2.1` playbook instead. Carbon Black Response - isolate an endpoint, given a hostname.

Carbon Black Enterprise Response · 6 tasks · 1 input · 5 outputs

Inputs

  • Hostname — The hostname to isolate.

Outputs

  • CbResponse.Sensors.CbSensorID — Carbon Black Response Sensors ids that has been isolated.
  • Endpoint — The isolated enpoint.
  • CbResponse.Sensors.Status — Sensor status.
  • CbResponse.Sensors.Isolated — Is sensor isolated.
  • Endpoint.Hostname — Endpoint hostname.

Commands used

cb-quarantine-device cb-sensor-info

Flowchart

yes Start Start Get host information from Carbon Black Enterprise Response - cb-sensor-info Get host information from... cb-sensor-info Isolate hostname - cb-quarantine-device Isolate hostname cb-quarantine-device Done Done Is Carbon Black Enterprise Response enabled? Is Carbon Black Enterpris... Get host information from Carbon Black Enterprise Response - cb-sensor-info Get host information from... cb-sensor-info