How to Export and Import Watchlists using API
book
Article ID: 287761
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
How to export watchlists from an EDR server to import into a separate EDR server.
Environment
- Carbon Black EDR Server: All Versions
Resolution
- Generate an API token with "Global Admin" permissions.
- Install the cbapi library via pip.
pip3 install cbapi
- Download the following two scripts from the cbapi-python repository.
- watchlist_exporter.py
- watchlist_importer.py
- Execute the scripts using Python3
Feedback
thumb_up
Yes
thumb_down
No