Cb Protection App for Splunk

Cb Protection is the market’s leading application control solution. Cb Protection enables the establish automated software execution controls and protection policies that safeguard corporate and customer endpoint data. Carbon Black and Splunk have partnered to deliver an advanced security reporting and analysis app for Cb Protection users. This app enables users to take advantage of the powerful visualization and analysis capabilities within Splunk to enhance operational management of Cb Protection and more quickly access intelligence during an investigation or audit. Primary use-cases include: • Deployment Activity at a glance – leading to better operational tuning based on new views and insights • File and Computer Investigations - comprehensive and timely investigations in a simple dashboard • Administrator Audit – full visibility into an important source of trusted change • Ability to create custom and ad-hoc queries Please note: This app was previously known as the Splunk App for Bit9.