Multithreaded threat Intelligence gathering built with Python3

Tools for the Computer Incident Response Team 💻

Carbon Black API - Python language bindings

Command line interface to Carbon Black Response

Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.

Collection of scripts for use with Carbon Black Cb Response API

event shipper for Carbon Black Defense notifications

This repo contains scripts that utilizes Carbon Black EDR for boosting its IR and detection cababilities

This project shows a graphical view of the process executions relationship in a tree format (HTML version)

A tool to fuel your Carbon Black servers with threat intelligence

Carbon Black - JoeSandbox Binary Detonation Connector

Rust crate to interact with Carbon Black API.

Management scripts for Carbon Black AppControl (Protection/Bit9).

This pack is targeted for collections of Carbon Black events

Electron app that downloads data from Carbon Black Defense and exports to CSV file

Clojure Library for interacting with Carbon Black Response APIs

cb-runner is an experimental Python program to run automated actions via Carbon Black Live Response. The actions are stored in a simple CSV format and can be applied to a single device or list of devices.

Atlas ITSI Content Pack for Carbon Black