CB ThreatHunter: Watchlist.reports returns the same report ID when iterating through a list
search cancel

CB ThreatHunter: Watchlist.reports returns the same report ID when iterating through a list

book

Article ID: 292448

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Looping through watchlist.reports returns the same watchlist name for each value

Environment

  • CB ThreatHunter: All Versions
  • CBAPI: 1.5.2 and Lower

Cause

Watchlist reports returns the same report because the url schema is overwritten so the next id can't be injected into the path

Resolution

Upgrade to cbapi 1.5.2 via the master branch in git

Additional Information

As of 9/20/2019, the current version of 1.5.2 available through pip does not have the patch for this issue. The fix must be pulled through the master branch via git