EDR: How to download binary from EDR UI

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

This article describes how to download binary from the EDR UI.

Environment

• EDR Server
• Hosted EDR

Resolution

1. Go to Binary Analysis page in the EDR UI.
2. Click on download icon under General Info section.
3. This will download the binary in a zip file with a name derived from the MD5 hash of the file.

Additional Information

• The The zip file contains two files: metadata and filedata.
• The filedata is the actual binary.
• The metadata file is a text file that contains a timestamp and original filename.