Skip to main content
Carbon Black App Control app icon

Carbon Black App Control

This app supports various investigative and containment actions on Carbon Black App Control (formerly Bit9)Built by Splunk LLC
soar product badge
Default Version 3.1.4

October 6, 2025

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2, 6.1

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#9 in Endpoint

This app supports various investigative and containment actions on Carbon Black App Control (formerly Bit9)

Supported actions

  • test connectivity: Validate the API Token by attempting to connect to the Device URL. This action runs a quick query on the device to check the connection and token
  • hunt file: Searches for a particular file across all the endpoints
  • upload file: Upload a file to a computer
  • list files: List the files available on the controller
  • get file: Get the file from the controller and add it to the vault
  • analyze file: Analyze a file on a computer
  • unblock hash: Unblocks a particular hash
  • block hash: Ban the file hash
  • get system info: Get information about an endpoint
  • get file instances: Searches for file instances
  • update file instance: Change local file instance state
  • update computer: Change computer object details
  • list policies: List the policies