Install and configure the Carbon Black Cloud App for QRadar

Products

• Carbon Black Cloud Endpoint Standard

Issue/Introduction

Where are the instructions to install and configure the new version of the QRadar Carbon Black Cloud App to use the supported API Access Levels.

Environment

• Carbon Black Cloud Console: Current Version
• IBM QRadar: All Supported Versions
• IBM QRadar Carbon Black Cloud App: 2.3.0 version

Cause

SIEM Access Level ype is going to be deprecated in January 2025 and new configurations must use the "Custom" Access Level

Resolution

The instructions and configuration steps are all documented on the developer.carbonblack.com site page for App for IBM QRadar v2.3.0