CB Response Cloud: How to Enable the ThreatConnect Connector

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To enable the ThreatConnect connector for a CB Response Cloud instance

Environment

• CB Response Cloud: All Versions
• ThreatConnect Connector: Version 2.0.6

Resolution

1. Open a Carbon Black support case.
2. Provide on the case:
   • The host-name of the CB Response Cloud instance
   • ThreatConnect URL
   • "API_Key"
   • "Secret_Key"
   • The list of communities that the connector will receive a feed from
3. Confirm that the ThreatConnect connector is working appropriately after integration is complete.

Additional Information

• CB Response Cloud supports ThreatConnect connector version 2.0.6 and above only now, because the previous version was built on deprecated APIs from ThreatConnect.