Hosted EDR: How to Enable the Yara Connector

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To enable the Yara connector and Yara Manager for a Hosted EDR instance.

Environment

• Hosted EDR
• Yara Connector
• Yara Manager

Resolution

1. Open a Carbon Black support case to have the Yara connector added to the Hosted EDR instance.
   • Provide the Hosted EDR's host-name or the URL
2. Once the connector has been added, log into the CB Response Cloud instance.
3. Navigate to the Threat Intelligence Feeds page to verify that the connector exists.
4. Confirm that Yara Manager is accessible at: https://<server-name>/connector/yara?token=<token provided by support>
5. Reset the initial token provided to connect to Yara Manager via the Token tab and note it for future use