Changelog
Updates
- General
- Fix resource warnings regarding unclosed file object
- Notice added to readme for Carbon Black Cloud features moving to Carbon Black Cloud SDK repo
- Carbon Black Cloud
- Increase default rows of alerts to 100
- Add get_auditlogs function to API object
- CB Threathunter
- Fix typo in process query
- Bump lxml from 4.4.1 to 4.6.2 for Threat Intelligence example
- CB Response
- Add Sensor Builds
- Alert.set_ignored() and AlertQuery.set_ignored():
- Added a docstring to specify what happens with this method
- Modified the payload keys based on manual testing
- Alert.change_status() and AlertQuery.change_status():
- Added a status check to ensure it's a valid status
Assets
3
abowersox-cb
released this
Changelog
Updates
- General
- Allow passing in proxy configuration as direct parameters during class instantiation of base API.
Assets
2
abowersox-cb
released this
Changelog
Updates
- General
- Updates to pool defaults in base API.
- Changes to exception handling to better discriminate ConnectionErrors and queries with invalid syntax.
- Various minor bug fixes throughout.
- Carbon Black Cloud
- Bug fixes to query implementation.
- Live Response: Account for sensor queue depth when submitting jobs.
- CB Defense
- Added examples for Dell BIOS verification.
- CB ThreatHunter
- Bug fixes to query implementation.
- Update process and event searches to v2.
- examples/create_feed: Make report optional during feed creation
- examples/process_exporter: Add headers to CSV file writer
- examples/threat_intelligence: Simplify report validation, add severity conversion to percent
Assets
2
dly-cb
released this
Changelog
Updates
- CB Response
- Changes to align with limits placed on the sensor update function in CB Response 7.1.0. Release notes are available on User Exchange, the ID is CB 28683. https://community.carbonblack.com/t5/Documentation-Downloads/CB-Response-7-1-0-Server-Release-Notes/ta-p/88027 .
Assets
3
avanbrunt-cb
released this
Changelog
Updates
- CB Response
- Fix Alert.save() to use alert v1 API
- Carbon Black Cloud
- Fix Live Response flow to use integrationServices/v3/device to prevent need for multiple API keys
- CB ThreatHunter
- Update example for ThreatHunter Query
Assets
3
abowersox-cb
released this
Changelog
Updates
- New Carbon Black Cloud API Support
- Support for Devices v6:
- List and search for devices
- Export device information to CSV
- Device control actions: quarantine, bypass, background scan, deregister/delete, update
- Support for Alerts v6:
- Search for and retrieve alerts
- Update alert status (dismiss alerts)
- Support for Devices v6:
Examples
- Devices v6:
- psc/device_control.py
- psc/download_device_list.py
- psc/list_devices.py
- Alerts v6:
- psc/alert_search_suggestions.py
- psc/bulk_update_alerts.py
- psc/bulk_update_cbanalytics_alerts.py
- psc/bulk_update_threat_alerts.py
- psc/bulk_update_vmware_alerts.py
- psc/bulk_update_watchlist_alerts.py
- psc/list_alert_facets.py
- psc/list_alerts.py
- psc/list_cbanalytics_alert_facets.py
- psc/list_cbanalytics_alerts.py
- psc/list_vmware_alert_facets.py
- psc/list_vmware_alerts.py
- psc/list_watchlist_alert_facets.py
- psc/list_watchlist_alerts.py
Assets
3
bvasil-cb
released this
Changelog
- General
- Change name to Carbon Black Cloud from PSC
Assets
3
bvasil-cb
released this
Changelog
- CB ThreatHunter
- Fix List object that was not callable.
Assets
3
avanbrunt-cb
released this
Changelog
-
General
- Prevent pytest from blocking python2 install
-
CB Response
- Fix python2 function overwrite for max_children
Assets
3
avanbrunt-cb
released this
Changelog
-
General
- Fix MoreThanOneResultError
- Add environmental org key
-
CB ThreatHunter
- Fix iterating process search results
- Fix watchlist reports fetch
- Fix process.summary