Carbon Black
Number of APIs: 511
Folders with a 🗝 icon indicate an authentication is provided on that for all of its children to inherit.
Folders and endpoints with a ⚠️ icon indicate that endpoint has been deprecated. It may still function, but there are newer endpoints we recommend using.
Qodex Environments
These JSON objects are Environments that contain all of the variables used in this Qodex Collection. Save the JSON locally and import into Qodex.
Carbon Black Cloud
{
"id": "fb0486be-3019-4e77-9c71-33d5e588af98",
"name": "Carbon Black Cloud",
"values": [
{
"key": "cb_url",
"value": "https://defense.conferdeploy.net",
"enabled": true
},
{
"key": "cb_org_key",
"value": "Org Key",
"enabled": true
},
{
"key": "cb_custom_id",
"value": "Custom API ID",
"enabled": true
},
{
"key": "cb_custom_key",
"value": "Custom API Key",
"enabled": true
},
{
"key": "cb_api_id",
"value": "API ID",
"enabled": true
},
{
"key": "cb_api_key",
"value": "API Secret Key",
"enabled": true
},
{
"key": "cb_lr_id",
"value": "Live Response API ID",
"enabled": true
},
{
"key": "cb_lr_key",
"value": "Live Response API Secret Key",
"enabled": true
},
{
"key": "cb_siem_id",
"value": "SIEM ID",
"enabled": true
},
{
"key": "cb_siem_key",
"value": "SIEM Secret Key",
"enabled": true
},
{
"key": "cb_aggregation_field",
"value": "`device_id` or `process_sha256`",
"enabled": true
},
{
"key": "cb_alert_id",
"value": "Alert ID",
"enabled": true
},
{
"key": "cb_config_id",
"value": "Event Forwarder Config ID",
"enabled": true
},
{
"key": "cb_cve_id",
"value": "CVE ID",
"enabled": true
},
{
"key": "cb_device_id",
"value": "Device ID",
"enabled": true
},
{
"key": "cb_device_control_id",
"value": "Device Control ID",
"enabled": true
},
{
"key": "cb_event_id",
"value": "Event ID",
"enabled": true
},
{
"key": "cb_feed_id",
"value": "Feed ID",
"enabled": true
},
{
"key": "cb_forwarder_id",
"value": "Forwarder ID",
"enabled": true
},
{
"key": "cb_ioc_id",
"value": "IOC ID",
"enabled": true
},
{
"key": "cb_job_id",
"value": "Job ID",
"enabled": true
},
{
"key": "cb_job_type",
"value": "",
"enabled": true
},
{
"key": "cb_lr_command_id",
"value": "LR Command ID",
"enabled": true
},
{
"key": "cb_lr_file_id",
"value": "Live Response File ID",
"enabled": true
},
{
"key": "cb_lr_session_id",
"value": "LR Session ID",
"enabled": true
},
{
"key": "cb_org_id",
"value": "Org ID",
"enabled": true
},
{
"key": "cb_policy_id",
"value": "Policy ID",
"enabled": true
},
{
"key": "cb_process_guid",
"value": "Process GUID",
"enabled": true
},
{
"key": "cb_query_id",
"value": "LiveQuery Query ID",
"enabled": true
},
{
"key": "cb_report_id",
"value": "Report ID",
"enabled": true
},
{
"key": "cb_reputation_id",
"value": "Reputation ID",
"enabled": true
},
{
"key": "cb_request_id",
"value": "Request ID",
"enabled": true
},
{
"key": "cb_rule_id",
"value": "Rule ID",
"enabled": true
},
{
"key": "cb_template_id",
"value": "LiveQuery Template ID",
"enabled": true
},
{
"key": "cb_vcenter_uuid",
"value": "vCenter UUID",
"enabled": true
},
{
"key": "cb_vm_id",
"value": "VM ID",
"enabled": true
},
{
"key": "cb_watchlist_id",
"value": "Watchlist ID",
"enabled": true
},
{
"key": "cb_wl_appliance_id",
"value": "Workload Appliance ID",
"enabled": true
},
{
"key": "cb_wl_resource_id",
"value": "Workload Resource ID",
"enabled": true
}
],
"_Qodex_variable_scope": "environment",
"_Qodex_exported_at": "2021-02-01T23:02:10.992Z",
"_Qodex_exported_using": "Qodex/7.36.1"
}
Carbon Black EDR (previously CB Response)
{
"id": "8d378ea8-9040-4eef-8b27-8238f24cd280",
"name": "Carbon Black Response",
"values": [
{
"key": "cb_url",
"value": "CB Response URL",
"enabled": true
},
{
"key": "cb_api_token",
"value": "API Token",
"enabled": true
},
{
"key": "cb_feed_id",
"value": "Feed ID",
"enabled": true
},
{
"key": "cb_feed_action",
"value": "Feed Action",
"enabled": true
},
{
"key": "cb_process_id",
"value": "Process ID",
"enabled": true
},
{
"key": "cb_segment_id",
"value": "Segment ID",
"enabled": true
},
{
"key": "cb_md5",
"value": "MD5",
"enabled": true
},
{
"key": "cb_alert_id",
"value": "Alert ID",
"enabled": true
},
{
"key": "cb_watchlist_id",
"value": "Watchlist ID",
"enabled": true
},
{
"key": "cb_feed_id",
"value": "Feed ID",
"enabled": true
}
],
"_Qodex_variable_scope": "environment",
"_Qodex_exported_at": "2020-04-16T21:17:32.349Z",
"_Qodex_exported_using": "Qodex/7.21.1"
}
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Alerts API-Search Alerts - Ungrouped - Export Alerts POST {{cb_url}}/api/alerts/v7/orgs/{{cb_org_key}}/alerts/_export
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Create Grant for a Principal POST {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Get Grant of a Principal GET {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/psc:user:{{cb_org_key}}:{{cb_user_id}}
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Bulk Fetch Grants POST {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/_fetch
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Get Permitted Roles GET {{cb_url}}/access/v3/orgs/{{cb_org_key}}/principals/{{cb_custom_id}}/roles/permitted?type=USER
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Update Grant of a Principal PUT {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/{{cb_principal_urn}}
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Create Profile in Principal’s Grant POST {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/{{cb_principal_urn}}/profiles
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Delete Grant for a Principal DELETE {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/{{cb_principal_urn}}
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Update Profile of Principal’s Grant PUT {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/{{cb_principal_urn}}/profiles/{{cb_profile_uuid}}
-
Carbon Black Cloud (CBC)-Platform APIs 🗝-Access Profiles and Grants API - Delete Profile DELETE {{cb_url}}/access/v2/orgs/{{cb_org_key}}/grants/{{cb_principal_urn}}/profiles/{{cb_profile_uuid}}