Carbon Black × AmbactiBring Carbon Black into
the flow of work.
A little less busywork with Carbon Black.
Gather contextDo the workReview & share
Carbon Black EDR processes and binaries3 capabilities+
- Search processes by executable name
- Retrieve a binary by identifier
- Read executable binary contents
Carbon Black EDR sensors2 capabilities+
- Identify sensors that executed a matching process
- Enable sensor network isolation
Carbon Black App Control2 capabilities+
- Retrieve a file instance and its computer
- Change the policy assigned to a computer
Frequently asked
questions.
What could an Ambacti integration do with Carbon Black?
The documented operations include Carbon Black EDR processes and binaries: Search processes by executable name; Carbon Black EDR processes and binaries: Retrieve a binary by identifier; Carbon Black EDR processes and binaries: Read executable binary contents; Carbon Black EDR sensors: Identify sensors that executed a matching process.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in Carbon Black?
Decide which work could run on its own and which steps need your review.