VMWare Carbon Black EDR

Carbon Black EDR saves endpoint activity data and helps visualize the attack kill chain. 

More detailed documentation is on its way. In the meantime,  see the available steps below. 

Available steps

These are the premade steps for Carbon Black EDR. Don't see the step you need? No problem, you can easily create custom steps. 

• Add hash to ban list
• Create watchlist
• Deactivate banned hash
• Delete watchlist
• Get sensor by ID
• Get sensors by hostname
• Get sensors by IP address 
• Get sensor statistics 
• Get watchlist information
• List banned hashes
• List watchlists
• Update watchlist

Available templates

There are currently no templates available.