Example CbApi code with boilerplate

svchost_cbapi.py

import cbapi

# Connect to the Cb server on cbserver.local.
cb = cbapi.CbApi("https://cbserver.local.", token="API_TOKEN", ssl_verify=False)

while True:
  # find all executions of a process named "svchost.exe" not in a Windows System directory
  procs = cb.process_search('process_name:svchost.exe -path:c:\\windows\\system32\\svchost.exe -path:c:\\windows\\syswow64\\svchost.exe', start=start)
  
  if len(procs["results"]) == 0:
    break
  
  for result in procs["results"]:
    proc_detail = cb.process_events(result['id'], result['segment_id'])
    print proc_detail['process']['start'], proc_detail['process']['hostname'], proc_detail['process']['path']