CBPBanHash Deprecated

Deprecated. Use the cbp-fileRule-createOrUpdate command instead.

python · Carbon Black Enterprise Protection

Source

import demistomock as demisto  # noqa: F401
from CommonServerPython import *  # noqa: F401

CBP_HASH_BANNED = '3'
res = []
t = []
for h in argToList(demisto.args()['hash']):
    e = demisto.executeCommand("cbp-fileRule-createOrUpdate", {"fileState": CBP_HASH_BANNED, "hash": h})[0]
    if isError(e):
        res += [e]
    else:
        t.append(e['Contents'])

res.append({'ContentsFormat': formats['table'], 'Type': entryTypes['note'], 'Contents': t})
demisto.results(res)

README

Bans/block lists a hash in CBEP/Bit9.

Script Data

Name	Description
Script Type	python
Tags	carbon-black-protection, bit9

Dependencies

This script uses the following commands and scripts.

cbp-fileRule-update

Inputs

Argument Name	Description
hash	The hash value(s) to ban (comma-separated).

Outputs

There are no outputs for this script.