UncoderIO
diff --git a/‎uncoder-core/app/routers/meta_info.py‎
Lines changed: 0 additions & 88 deletions b/‎uncoder-core/app/routers/meta_info.py‎
Lines changed: 0 additions & 88 deletions
diff --git a/‎uncoder-core/app/translator/platforms/carbonblack/const.py‎
Lines changed: 13 additions & 0 deletions b/‎uncoder-core/app/translator/platforms/carbonblack/const.py‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎uncoder-core/app/translator/platforms/carbonblack/mappings/__init__.py‎ b/‎uncoder-core/app/translator/platforms/carbonblack/mappings/__init__.py‎
diff --git a/‎uncoder-core/app/translator/platforms/carbonblack/mappings/carbonblack_cti.py‎
Lines changed: 0 additions & 10 deletions b/‎uncoder-core/app/translator/platforms/carbonblack/mappings/carbonblack_cti.py‎
Lines changed: 0 additions & 10 deletions
diff --git a/‎uncoder-core/app/translator/platforms/carbonblack/renders/carbonblack_cti.py‎
Lines changed: 3 additions & 3 deletions b/‎uncoder-core/app/translator/platforms/carbonblack/renders/carbonblack_cti.py‎
Lines changed: 3 additions & 3 deletions
@@ -8,4 +8,17 @@
     "platform_name": "Query (Cloud)",
 }
 
+
+DEFAULT_CARBONBLACK_CTI_MAPPING = {
+    "SourceIP": "netconn_local_ipv4",
+    "DestinationIP": "netconn_ipv4",
+    "Domain": "netconn_domain",
+    "URL": "netconn_domain",
+    "HashMd5": "hash",
+    "HashSha256": "hash",
+    "Files": "filemod_name",
+    "Emails": "process_username",
+}
+
+
 carbonblack_query_details = PlatformDetails(**CARBON_BLACK_QUERY_DETAILS)
@@ -20,8 +20,8 @@
 from app.translator.core.models.platform_details import PlatformDetails
 from app.translator.core.render_cti import RenderCTI
 from app.translator.managers import render_cti_manager
-from app.translator.platforms.carbonblack.const import carbonblack_query_details
-from app.translator.platforms.carbonblack.mappings.carbonblack_cti import DEFAULT_CARBONBLACK_MAPPING
+from app.translator.platforms.carbonblack.const import DEFAULT_CARBONBLACK_CTI_MAPPING, carbonblack_query_details
+
 
 
 @render_cti_manager.register
@@ -35,4 +35,4 @@ class CarbonBlackCTI(RenderCTI):
     result_join: str = ""
     final_result_for_many: str = "({result})\n"
     final_result_for_one: str = "{result}\n"
-    default_mapping = DEFAULT_CARBONBLACK_MAPPING
+    default_mapping = DEFAULT_CARBONBLACK_CTI_MAPPING