Skip to content

Latest commit

 

History

History
82 lines (63 loc) · 2.5 KB

response-api.rst

File metadata and controls

82 lines (63 loc) · 2.5 KB
Raw

CB Response API

This page documents the public interfaces exposed by cbapi when communicating with a Carbon Black Enterprise Response server.

Main Interface

To use cbapi with Carbon Black Response, you will be using the CbResponseAPI. The CbResponseAPI object then exposes two main methods to access data on the Carbon Black server: select and create.

cbapi.response.rest_api.CbResponseAPI

Queries

cbapi.response.query.Query

cbapi.response.models.ProcessQuery

cbapi.response.models.ThreatReportQuery

cbapi.response.models.AlertQuery

Models

cbapi.response.models.Process

cbapi.response.models.Binary

cbapi.response.models.Sensor

cbapi.response.models.Feed

cbapi.response.models.BannedHash

cbapi.response.models.Watchlist

cbapi.response.models.Alert

Live Response

cbapi.live_response_api.CbLRSessionBase

File Operations

cbapi.live_response_api.CbLRSessionBase.get_file

cbapi.live_response_api.CbLRSessionBase.delete_file

cbapi.live_response_api.CbLRSessionBase.put_file

cbapi.live_response_api.CbLRSessionBase.list_directory

cbapi.live_response_api.CbLRSessionBase.create_directory

cbapi.live_response_api.CbLRSessionBase.walk

Registry Operations

cbapi.live_response_api.CbLRSessionBase.get_registry_value

cbapi.live_response_api.CbLRSessionBase.set_registry_value

cbapi.live_response_api.CbLRSessionBase.delete_registry_value

cbapi.live_response_api.CbLRSessionBase.create_registry_key

cbapi.live_response_api.CbLRSessionBase.delete_registry_key

cbapi.live_response_api.CbLRSessionBase.list_registry_keys_and_values

cbapi.live_response_api.CbLRSessionBase.list_registry_keys

Process Operations

cbapi.live_response_api.CbLRSessionBase.kill_process

cbapi.live_response_api.CbLRSessionBase.create_process

cbapi.live_response_api.CbLRSessionBase.list_processes