This app is archived. Learn more
As of January 31st, 2022 the APIs the app is consuming will be decomissioned causing some features to no longer function. This app is no longer supported. Migrate to the VMware Carbon Black Cloud App for Splunk (https://splunkbase.splunk.com/app/5332/). Note: VMware Carbon Black Cloud users should upgrade to our unified app to access the latest features and support. Download the VMware Carbon Black Cloud App for Splunk (https://splunkbase.splunk.com/app/5332/).. The VMware Carbon Black Cloud Endpoint Standard App for Splunk integrates NGAV and Behavioral EDR with Splunk. Please ensure that the VMware Carbon Black Cloud Endpoint Standard Add-on for Splunk is installed before installing this app, as this app requires the Add-on to function. The V1.0.0 Release includes pre-built visualizations from Carbon Black: Providing a thorough overview of Carbon Black Cloud Endpoint Standard environments as well as dashboards to search through threat and policy notifications, view and manipulate device status, etc. Includes integration with the Adaptive Response framework and Enterprise Splunk Security.
(1)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources