Locked AutoResponder - Carbon Black Response IR Tool

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Carbon Black Response IR tool for hunting threats in an environment

What is it?

AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams

What can it do?

Module     ✔️ / ❌
Delete Files     ✔️
Delete Registry Values     ✔️
Delete Win32 Service Entries     ✔️
Delete Scheduled Task Entries     ✔️
Detailed Sensor List Export     ✔️
Find Files     ✔️
Find Registry Values     ✔️
Download Files     ✔️
Download A list of Win32 Service Entries     ✔️
Download A list of Scheduled Task Entries     ✔️
Download A list of WMI Entries     ✔️
Isolate/Unisolate Sensors     ✔️
Kill Running Processes     ✔️
Restart Sensors     ✔️
Restart Endpoints     ✔️
Generate CSV reports     ✔️
Scan Collected binaries with THOR APT Scanner     ✔️
Delete WMI Entries     ❌
Solve the whole case and generate a nice report so we can all have a cold beer     ❌

This is the hidden content, please

• Sign In
• or
• Sign Up