The Security Operations Carbon Black Integration - Get Running Processes is the implementation for the Carbon Black integration launched by the Security Operations Integration - Get Running Process workflow.

About this task

Workflow process activities include:

• Get IP from CI activity
• Collect Carbon Black Configurations activity
• Get Sensor ID activity
• Execution Tracking - Begin (CIs) activity
• Create Session
• Capability Execution Tracking - Failure activity
• Check Session Status activity
• Timer workflow activityTimer workflow activityTimer workflow activity - Waits for 1 second
• Turnstile workflow activity - Check Session ready 30 times
• Create Command Process activity
• Check Command Status and Get Process activity
• Map Processes Data activity and return process list
• Create Enrichment Data records activity
• Capability Execution Tracking - Complete activity
• Close Session activity

Activities specific to this workflow are described here. For more information on other activities, see Common integration workflow activities.