Carbon Black Cloud: How to Enable Data Forwarders
search cancel

Carbon Black Cloud: How to Enable Data Forwarders

book

Article ID: 286134

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

To enable a Data Forwarder within Carbon Black Cloud

Environment

  • Carbon Black Cloud Console: All Versions
  • Data Forwarder
  • Amazon Simple Storage Service (Amazon S3)

Resolution

For steps utilizing the Carbon Black Cloud Console see our Product Documentation (recommended)
For steps utilizing the Carbon Black Cloud API see our Developer Post

Additional Information

  • Once forwarders are configured, a SIEM can be configured to collect this data from the Amazon S3 bucket