args:
- default: true
  description: CSV list of IP addresses to identify.
  name: ip
  required: true
comment: Search Carbon Black for connection to specified IP addresses.
commonfields:
  id: CBFindIP
  version: -1
enabled: true
name: CBFindIP
outputs:
- contextPath: Process.Path
  description: Process path.
  type: String
- contextPath: Process.PID
  description: Process PID.
  type: Number
- contextPath: Process.MD5
  description: Process MD5 hash.
  type: String
- contextPath: Process.Hostname
  description: Process hostname.
  type: String
- contextPath: Process.Name
  description: Process name.
  type: String
- contextPath: Process.CbSegmentID
  description: Carbon Black "segment" where this process instance is stored. Required to fetch additional information for a process.
  type: String
- contextPath: Process.CbID
  description: Carbon Black unique ID for this process instance. Required (together with CbSegmentID) to fetch additional information for a process.
  type: String
- contextPath: Process.Endpoint
  description: The endpoint of the process.
  type: String
script: '-'
tags:
- carbon-black
- endpoint
- enhancement
timeout: '0'
type: python
subtype: python3
runas: DBotWeakRole
tests:
- CBFindIP - Test
dependson:
  must: []
fromversion: 5.0.0
dockerimage: demisto/python3:3.12.13.10116658