How to Enable Data Forwarders

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

To enable a Data Forwarder within Carbon Black Cloud

Environment

• Carbon Black Cloud Console: All Versions
• Data Forwarder
• Amazon Simple Storage Service (Amazon S3)

Resolution

For steps utilizing the Carbon Black Cloud Console see our Product Documentation (recommended)
For steps utilizing the Carbon Black Cloud API see our Developer Post

Additional Information

• Once forwarders are configured, a SIEM can be configured to collect this data from the Amazon S3 bucket