Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Carbon Black Cloud as a Data Provider #349

Open
emilydotme opened this issue Mar 25, 2022 · 2 comments
Open

Support Carbon Black Cloud as a Data Provider #349

emilydotme opened this issue Mar 25, 2022 · 2 comments
Labels
hackmonth2023 Candidates for hack month 2023
Milestone

Comments

@emilydotme
Copy link

emilydotme commented Mar 25, 2022

Describe the solution you'd like
Carbon Black Cloud could be used as one of the Data Provider to be added into msticpy

Additional context

  • there is an existing library to interact with Carbon Black Cloud SDK Python but it seems to be quite limited in its functionality - e.g. does not seem to utilise the /threathunter/* service category to obtain events associated with a given process, etc.
  • proposing to use the API via requests - https://developer.carbonblack.com/reference/carbon-black-cloud/

note: assigning this issue to myself!

@ianhelle ianhelle added the hackmonth2023 Candidates for hack month 2023 label Sep 19, 2022
@ianhelle
Copy link
Contributor

We're hoping to get this soon from an external contribution from Alex @ Bank of Montreal

@ianhelle ianhelle added this to the Release 2.4.0 milestone Feb 17, 2023
@ghost
Copy link

ghost commented Mar 1, 2023

yep, working on it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
hackmonth2023 Candidates for hack month 2023
Projects
Status: No status
Development

No branches or pull requests

2 participants