Skip to main content

Get the binary file from Carbon Black by its MD5 hash

This playbook retrieves the binary file by its MD5 hash from the Carbon Black telemetry data.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

This playbook does not use any sub-playbooks.

Integrations#

integration-Carbon_Black_Enterprise_Response

Scripts#

IsIntegrationAvailable

Commands#

cb-binary-download

Playbook Inputs#


NameDescriptionDefault ValueRequired
MD5MD5 hash of the binary file to be retrieved,File.MD5Optional

Playbook Outputs#


PathDescriptionType
File.SizeThe size of the file.number
File.TypeThe type of the file.string
File.InfoGeneral information of the file.string
File.MD5The MD5 hash of the file.string
File.SHA1The SHA1 hash of the file.string
File.SHA256The SHA256 hash of the file.string
File.SHA512The SHA512 hash of the file.string
File.SSDeepThe file SSDeep.string
File.NameThe file name.string
File.EntryIDFile entry ID.string
File.ExtensionThe file extension.string

Playbook Image#


Get binary file from Carbon Black by its MD5 hash