args:
- description: Hostname or IP of a Carbon Black sensor.
  name: endpoint
  required: true
- description: Comma-separated list of file paths to download from the endpoint.
  isArray: true
  name: path
  required: true
- auto: PREDEFINED
  defaultValue: '2000'
  description: Session timeout (ms). Default is 2000.
  name: timeout
  predefined:
  - Session timeout (If a command is not issued after this time the session will be closed)
comment: |-
  This automation translates an endpoints hostname/IP to the Carbon Black sensor ID.
  It then opens a session to the endpoint to download the given file paths and closes the session.
commonfields:
  id: CBLiveGetFile_V2
  version: -1
name: CBLiveGetFile_V2
outputs:
- contextPath: CbLiveResponse.Commands.CbCommandID
  description: Unique command identifier.
  type: Number
- contextPath: CbLiveResponse.Commands.CommandName
  description: The command name.
  type: String
- contextPath: CbLiveResponse.Commands.Status
  description: The command status ('pending', 'in progress', 'complete', 'error', or 'canceled').
  type: String
- contextPath: CbLiveResponse.Commands.CommandCompletionTime
  description: The command completion time (0 if not complete).
  type: String
- contextPath: CbLiveResponse.Commands.OperandObject
  description: The source path of the file.
  type: String
- contextPath: CbLiveResponse.Commands.FileID
  description: Unique file ID.
  type: Number
- contextPath: CbLiveResponse.File.Size
  description: File size.
  type: String
- contextPath: CbLiveResponse.File.SHA1
  description: File SHA1 hash.
  type: String
- contextPath: CbLiveResponse.File.SHA256
  description: File SHA256 hash.
  type: String
- contextPath: CbLiveResponse.File.Name
  description: File name.
  type: String
- contextPath: CbLiveResponse.File.SSDeep
  description: File SSDeep hash.
  type: String
- contextPath: CbLiveResponse.File.EntryID
  description: File EntryID.
  type: Number
- contextPath: CbLiveResponse.File.Info
  description: File info.
  type: String
- contextPath: CbLiveResponse.File.Type
  description: File type.
  type: String
- contextPath: CbLiveResponse.File.MD5
  description: File MD5.
  type: String
- contextPath: CbLiveResponse.File.Extension
  description: File extension.
  type: String
- contextPath: File.Size
  description: The size of the file in bytes.
  type: Number
- contextPath: File.MD5
  description: The MD5 hash of the file.
  type: String
- contextPath: File.SHA1
  description: The SHA1 hash of the file.
  type: String
- contextPath: File.SHA256
  description: The SHA256 hash of the file.
  type: String
- contextPath: File.Name
  description: The name of the file.
  type: String
- contextPath: File.SSDeep
  description: The SSDeep hash of the file (same as displayed in file entries).
  type: String
- contextPath: File.EntryID
  description: File entry ID.
  type: String
- contextPath: File.Info
  description: Information about the file.
  type: String
- contextPath: File.Type
  description: The file type.
  type: String
- contextPath: File.Extension
  description: The extension of the file.
  type: String
script: '-'
subtype: python3
tags:
- carbon-black
- endpoint
timeout: '0'
type: python
dockerimage: demisto/python3:3.12.13.10116658
tests:
- No Test
dependson:
  must:
  - cb-session-create-and-wait
  - cb-session-close
  - cb-get-file-from-endpoint
  - cb-list-sensors
  - cb-list-sessions
fromversion: 5.0.0