EDR: How to export and import Watchlists using API
search cancel

EDR: How to export and import Watchlists using API

book

Article ID: 287761

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to import and export Watchlists

Environment

  • EDR Server: All Versions
  • Hosted EDR Server: All Versions

Resolution

  • There are a couple of scripts for exporting/importing Watchlists through the following github page: 
https://github.com/carbonblack/cbapi-python/tree/master/examples/response
  • The scripts are:
    watchlist_exporter.py 
    watchlist_importer.py

Additional Information

This can be accomplished from both via on-prem EDR servers and Hosted EDR instances.