Skip to main content
Carbon Black ThreatHunter app icon

Carbon Black ThreatHunter

Integrates Phantom with the Carbon Black PSC environmentBuilt by srv-stage-community
soar product badge
Default Version 1.0.0

September 17, 2021

Compatibility

SOAR On-Prem

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8, 4.7, 4.6, 4.5, 4.2

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#3 in Endpoint

Integrates Phantom with the Carbon Black PSC environment

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • get file: Download a file and add it to the vault
  • get file metadata: Get metadata of a file
  • run query: Invoke a search for process information
  • live response: Take action on the remote endpoint
  • get single feed: Get feed info for a single feed
  • delete single feed: Delete single feed
  • get feed reports: Get reports for a single feed
  • get all feeds: Get a list of feeds available
  • create report ioc: Add an IOC to a report
  • delete ioc value: Delete IOC value from a report
  • delete report ioc: Remove an IOC from a report