Issue Command

POST {{cb_url}}/appservices/v6/orgs/{{cb_org_key}}/liveresponse/sessions/{{cb_lr_session_id}}/commands

Send a Live Response command to the sensor.

RBAC Permissions Required

Permission (.notation name)Operation(s)
org.liveresponse.sessionREAD
org.liveresponse.processREAD, EXECUTE, DELETE
org.liveresponse.registryCREATE, READ, UPDATE, DELETE
org.liveresponse.fileCREATE, READ, DELETE
org.liveresponse.memdumpREAD

See Documentation

Request Body

{"name"=>"directory list", "path"=>"C:\\\\Users"}