CBFindIP
Search Carbon Black for connection to specified IP addresses.
python · Carbon Black Enterprise Response
Details
| ID | CBFindIP |
|---|---|
| Language | python |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Tags | carbon-black endpoint enhancement |
README
Search Carbon Black for connection to specified IP addresses.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | carbon-black, endpoint, enhancement |
| Cortex XSOAR Version | 5.0.0 |
Inputs
| Argument Name | Description |
|---|---|
| ip | CSV list of IP addresses to identify. |
Outputs
| Path | Description | Type |
|---|---|---|
| Process.Path | Process path. | String |
| Process.PID | Process PID. | Number |
| Process.MD5 | Process MD5 hash. | String |
| Process.Hostname | Process hostname. | String |
| Process.Name | Process name. | String |
| Process.CbSegmentID | Carbon Black “segment” where this process instance is stored. Required to fetch additional information for a process. | String |
| Process.CbID | Carbon Black unique ID for this process instance. Required (together with CbSegmentID) to fetch additional information for a process. | String |
| Process.Endpoint | The endpoint of the process. | String |
args: - default: true description: CSV list of IP addresses to identify. name: ip required: true comment: Search Carbon Black for connection to specified IP addresses. commonfields: id: CBFindIP version: -1 enabled: true name: CBFindIP outputs: - contextPath: Process.Path description: Process path. type: String - contextPath: Process.PID description: Process PID. type: Number - contextPath: Process.MD5 description: Process MD5 hash. type: String - contextPath: Process.Hostname description: Process hostname. type: String - contextPath: Process.Name description: Process name. type: String - contextPath: Process.CbSegmentID description: Carbon Black "segment" where this process instance is stored. Required to fetch additional information for a process. type: String - contextPath: Process.CbID description: Carbon Black unique ID for this process instance. Required (together with CbSegmentID) to fetch additional information for a process. type: String - contextPath: Process.Endpoint description: The endpoint of the process. type: String script: '-' tags: - carbon-black - endpoint - enhancement timeout: '0' type: python subtype: python3 runas: DBotWeakRole tests: - CBFindIP - Test dependson: must: [] fromversion: 5.0.0 dockerimage: demisto/python3:3.12.13.10116658