Ingest Logs Alerts and Events From Carbon Black Cloud to a SIEM Tool

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Managed Detection (formerly Cb Threatsight)
• Carbon Black Cloud Prevention
• Carbon Black Cloud Workload

Issue/Introduction

How do I ingest logs alerts and events from Carbon Black Cloud to a SIEM tool?

Resolution

Information on how to integrate with Carbon Black Cloud can be found in a couple of different places. "How" depends on what SIEM is being used and what methods it supports (Custom API calls, one of our pre-built SIEM Apps, or our Data Forwarder).

More information can be found in:

• Tech Docs
• Our Developer site