Carbon Black Cloud: How to configure the VMware Carbon Black Cloud App in QRadar

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to configure the VMware Carbon Black Cloud App in IBM QRadar to receive syslog events.

Environment

• Carbon Black Cloud Web Console: All Versions
• IBM QRadar: 7.3.3 Patch 6+ and newer
• VMware Carbon Black Cloud App for IBM QRadar: 2.x

Resolution

• Find the latest install and configuration instructions in the Installation & User Guide on the VMware Carbon Black Cloud Developers site
• Download the latest version of the app