Block Endpoint - Carbon Black Response
Carbon Black Enterprise Response Pack.#
This Playbook is part of theCarbon Black Response isolates an endpoint for a given hostname.
#
DependenciesThis playbook uses the following sub-playbooks, integrations, and scripts.
#
Sub-playbooksThis playbook does not use any sub-playbooks.
#
Integrationscarbonblack
#
ScriptsThis playbook does not use any scripts.
#
Commands- cb-quarantine-device
- cb-sensor-info
#
Playbook InputsName | Description | Default Value | Required |
---|---|---|---|
Hostname | The hostname to isolate. | ${Endpoint.Hostname} | Optional |
#
Playbook OutputsPath | Description | Type |
---|---|---|
CbResponse.Sensors.CbSensorID | Carbon Black Response Sensors IDs that are isolated. | unknown |
Endpoint | The isolated enpoint. | unknown |
CbResponse.Sensors.Status | Sensor status. | unknown |
CbResponse.Sensors.Isolated | Is sensor isolated. | unknown |
Endpoint.Hostname | Endpoint hostname. | unknown |