Carbon Black Cloud: Getting Started With Management Best Practices

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Are there any best practices or resources available for getting started with Carbon Black Cloud?

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Supported Versions

Resolution

Yes, there are a number of introductory resources containing guides, processes, and training for Carbon Black Cloud.

1. Create an account and enroll in the complimentary Carbon Black Cloud training course from VMware Customer Connect Learning.
   • VMware Carbon Black Cloud Fundamentals
2. Review the following feature-specific Tuning and Best Practices Guides, authored by members of the Professional Services team.
   • Endpoint Standard
   • Enterprise EDR
   • Audit and Remediation
   • Workload
3. Explore the Carbon Black Cloud demos on VMware TechZone.
   • Carbon Black Cloud Platform Demos and Hands-on Labs
   • Carbon Black Cloud Workload Protection Demos
4. Refer to VMware Docs for documentation regarding product administration, features, and updates.
   • Carbon Black Cloud Documentation on VMware Docs
5. Ensure machines are always running supported versions of the Carbon Black Cloud Sensor.
   • Carbon Black Cloud: Product Release Life Cycle Status
6. When triaging Alerts, refer to the following documentation.
   • Best Practices and Questions to Ask When Investigating Alerts
   • Endpoint Standard: Troubleshooting Configuration vs. Compatibility
   • Endpoint Standard: Methods to Approve/Ban Applications
   • Endpoint Standard: How to Triage a Suspected Missed Malware Incident
7. For third-party integrations, refer to the following resources.
   • Getting Started With the Data Forwarder
   • Carbon Black Cloud API Documentation

Additional Information

• Additional paid training courses for Carbon Black Cloud can be found and enrolled in on VMware MyLearn.
• The User Exchange Knowledgebase should be searched for additional troubleshooting and issue resolution articles published by the Technical Support team.
• Extensive configuration requests, such as auditing security posture, conducting product training, and performing threat analysis, fall outside the scope of VMware Carbon Black Technical Support.
• Some requests outside the scope of Technical Support, such as developing, testing and deploying custom rules, or performing health assessments, can be addressed by the Professional Services team.