Latest Version 1.0.0
September 17, 2021
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
Carbon Black ThreatHunter
Integrates Phantom with the Carbon Black PSC environment
Built by
Compatibility
Not Available
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8, 4.7, 4.6, 4.5, 4.2
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Ranking
#2
in Endpoint
Integrates Phantom with the Carbon Black PSC environment
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get file: Download a file and add it to the vault
- get file metadata: Get metadata of a file
- run query: Invoke a search for process information
- live response: Take action on the remote endpoint
- get single feed: Get feed info for a single feed
- delete single feed: Delete single feed
- get feed reports: Get reports for a single feed
- get all feeds: Get a list of feeds available
- create report ioc: Add an IOC to a report
- delete ioc value: Delete IOC value from a report
- delete report ioc: Remove an IOC from a report
Categories
Created By
srv-stage-community
Source Code
GitHub(Opens new window)Type
connector
Splunk Answers
Ask a question about this app listing(Opens new window)Resources
Log in to report this app listing