Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How To Create A Custom Feed

EDR: How To Create A Custom Feed

Environment

  • EDR Server: All Versions

Objective

How to create a custom Threat Intelligence Feed in CB Response.

Resolution

Instructions on creating custom feeds can be found in the cbfeeds github repository carbonblack/cbfeeds

Additional Notes

  • In the Feed_URL section, specify the .json file extension for the file type, or the add feed API will fail with a 500 Internal Server Error
  • Depending on the format of the Feed JSON it may be necessary to add the feed manually providing both the Feed URL and the Provider URL

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
2775
Contributors