VMware Carbon Black
Ingest EDR alerts from Carbon Black Cloud.
Imports endpoint detection alerts from VMware Carbon Black Cloud into Basirah.
Prerequisites
- Carbon Black Cloud account with API access
- API key from the Carbon Black Cloud console
Authentication
API key.
Configuration
No additional configuration fields required. Provide the connection URL and API key during setup.
Data flow
Ingests EDR findings from Carbon Black and normalizes them into Basirah’s common finding format.