Issue Command
POST {{cb_url}}/appservices/v6/orgs/{{cb_org_key}}/liveresponse/sessions/{{cb_lr_session_id}}/commands
Send a Live Response command to the sensor.
RBAC Permissions Required
Permission (.notation name) | Operation(s) |
---|---|
org.liveresponse.session | READ |
org.liveresponse.process | READ, EXECUTE, DELETE |
org.liveresponse.registry | CREATE, READ, UPDATE, DELETE |
org.liveresponse.file | CREATE, READ, DELETE |
org.liveresponse.memdump | READ |
Request Body
{"name"=>"directory list", "path"=>"C:\\\\Users"}