cbapi Python Bindings - 1.7.10

Bug Fixes

• Update CbAPI to use packaging instead of distutils for python3.7+

cbapi Python Bindings - 1.7.9

Bug Fix:

• Adjust Live Response Worker creation for EDR sensors to optimize for sensor specific jobs

cbapi Python Bindings - 1.7.8

Bug Fix:

• Vendor the attrdict module because of ImportError for Python3.10

cbapi Python Bindings - 1.7.7

Bug Fix

• Changed the sort order for EDR sensor searches from 'last_checkin_time' (default when none provided explicitly) to 'hostname' to make the sort stable as sensors checkin during paging

cbapi Python Bindings - 1.7.6

Bug Fixes

• Removed the requirement for an admin token to connect
• Added sensor paginated query

General

• Updated version of lxml library

cbapi Python Bindings - 1.7.5

Changelog

Updates

• General
  • Allow the CbAPI to accept a pre-configured Session object to be used for access, to get around unusual configuration requirements.

cbapi Python Bindings - 1.7.4

Changelog

Updates

• General
  • Fix example code in the documentation for Facets
• CB Response
  • Add missing fields for SensorGroup class and fix example script to properly create SensorGroup
  • Fix example script sensor_group_operations.py to list groups without ipaddresses
  • Fix alert.save()
  • Allow blocked processes to be accessed through the Process (processblocks)

cbapi Python Bindings - 1.7.3

Changelog

Updates

• General
  • Fix resource warnings regarding unclosed file object
  • Notice added to readme for Carbon Black Cloud features moving to Carbon Black Cloud SDK repo
• Carbon Black Cloud
  • Increase default rows of alerts to 100
  • Add get_auditlogs function to API object
• CB Threathunter
  • Fix typo in process query
  • Bump lxml from 4.4.1 to 4.6.2 for Threat Intelligence example
• CB Response
  • Add Sensor Builds
  • Alert.set_ignored() and AlertQuery.set_ignored():
    • Added a docstring to specify what happens with this method
    • Modified the payload keys based on manual testing
  • Alert.change_status() and AlertQuery.change_status():
    • Added a status check to ensure it's a valid status

cbapi Python Bindings - 1.7.2

Changelog

Updates

• General
  • Allow passing in proxy configuration as direct parameters during class instantiation of base API.

cbapi Python Bindings - 1.7.0

Changelog

Updates

• General
  • Updates to pool defaults in base API.
  • Changes to exception handling to better discriminate ConnectionErrors and queries with invalid syntax.
  • Various minor bug fixes throughout.
• Carbon Black Cloud
  • Bug fixes to query implementation.
  • Live Response: Account for sensor queue depth when submitting jobs.
• CB Defense
  • Added examples for Dell BIOS verification.
• CB ThreatHunter
  • Bug fixes to query implementation.
  • Update process and event searches to v2.
  • examples/create_feed: Make report optional during feed creation
  • examples/process_exporter: Add headers to CSV file writer
  • examples/threat_intelligence: Simplify report validation, add severity conversion to percent