CB Response Cloud: How to Change the Status of the Whitelisting Service

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To change or update the status of an already whitelisted IP address

Environment

• CB Response Cloud: All Versions

Resolution

1. Open Terminal from the Whitelist endpoint.
2. Run the cURL command:

   curl -X PATCH "https://cbrc.carbonblack.io/api/whitelist/enabled" -H  "accept: application/json" -H  "X-Auth-Token: <YOUR_TOKEN>" -H  "Content-Type: application/json" -d "{  \"state\": true}"

3. A response will be received showing that the change was received:

   204 NO CONTENT

4. Apply all changes.

Additional Information

• Add the X-Auth-Token being used.
• The status can be updated to either True or False to enable or disable the whitelist.
• If step 4 is not followed - the changes not being applied - then everything can be lost.