Latest Version 1.0.0
September 17, 2021
Welcome to the new Splunkbase! To return to the old Splunkbase, .
Carbon Black ThreatHunter
Integrates Phantom with the Carbon Black PSC environment
Built by
Compatibility
Not Available
Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8, 4.7, 4.6, 4.5, 4.2
Rating
0
(0)
Log in to rate this app
Support
Not Supported
Ranking
#2
in Endpoint
Integrates Phantom with the Carbon Black PSC environment
Supported Actions
- test connectivity: Validate the asset configuration for connectivity using supplied configuration
- get file: Download a file and add it to the vault
- get file metadata: Get metadata of a file
- run query: Invoke a search for process information
- live response: Take action on the remote endpoint
- get single feed: Get feed info for a single feed
- delete single feed: Delete single feed
- get feed reports: Get reports for a single feed
- get all feeds: Get a list of feeds available
- create report ioc: Add an IOC to a report
- delete ioc value: Delete IOC value from a report
- delete report ioc: Remove an IOC from a report
Categories
Created By
srv-stage-community
Source Code
Type
connector
Licensing
Splunk Answers
Resources
Log in to report this app listing