Block File - Generic

Deprecated

Use "Block File - Generic v2" playbook instead

DEPRECATED. Use "Block File - Generic v2" playbook instead. Blocks files from running on endpoints. This playbook currently supports Carbon Black Enterprise Response.

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • Block File - Carbon Black Response

Integrations

This playbook does not use any integrations.

Scripts

This playbook does not use any scripts.

Commands

This playbook does not use any commands.

Playbook Inputs


NameDescriptionDefault ValueRequired
MD5The MD5 hash of the file you want to block.${File.MD5}Optional

Playbook Outputs


PathDescriptionType
CbResponse.BlockedHashes.LastBlock.TimeThe last block time.unknown
CbResponse.BlockedHashes.LastBlock.HostnameThe last block hostname.unknown
CbResponse.BlockedHashes.LastBlock.CbSensorIDThe last block sensor ID.unknown

Playbook Image


Block_File_Generic