CB PSC: Are the Splunk Apps CIM Compliant?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Are the Splunk Apps for the CB PSC CIM compliant?

Environment

• CB PSC Web Console: All Versions
• CB Defense Splunk App: All Versions
• CB ThreatHunter Splunk App: All Versions

Resolution

• The CB ThreatHunter App is CIM Compliant for Alerts
• The CB Defense App is not CIM Compliant

Additional Information

There is work being done to unify both of the CB Splunk Apps into one combined app. CIM compliance is on the roadmap for this new app.