Integrates Phantom with the Carbon Black PSC environment
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get file: Download a file and add it to the vault
- get file metadata: Get metadata of a file
- run query: Invoke a search for process information
- live response: Take action on the remote endpoint
- get single feed: Get feed info for a single feed
- delete single feed: Delete single feed
- get feed reports: Get reports for a single feed
- get all feeds: Get a list of feeds available
- create report ioc: Add an IOC to a report
- delete ioc value: Delete IOC value from a report
- delete report ioc: Remove an IOC from a report