LivingOffTheLandDrivers feed is not an exportable feed when using cbfeeds_airgap tool

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When utilizing the cbfeeds_airgap tool to export feeds, a message will display for those feeds that are not exportable by design. 

 LivingOffTheLandDrivers feed is not an exportable feed

 

Environment

• EDR Server: 7.8.x and Lower

Cause

LivingOffTheLandDrivers feed is new and has not been added to the hard coded list of exportable feeds.

Resolution

CB-44287 has been created to add this feed to the exportable list for the 7.9.0 server version. 

Additional Information

Temporary Workaround

1. Download the cbfeeds_export.py file attached to this KB. 
2. Place the file in a directory that you want to run the script
3. Change permissions of the file

   chmod 700 cbfeeds_export.py

4. Run the file while in the directory

   ./cbfeeds_export.py

This temporary workaround will add this feed as part of the exportable feed list, calling on the original cbfeeds_airgap script with the "export" switch.