CarbonBlackEndpointStandardEventCollector

Endpoint Standard (formerly called Carbon Black Defense), a Next-Generation Anti-Virus + EDR. Collect Anti-Virus & EDR alerts and Audit Log Events.

Endpoint · Carbon Black Endpoint Standard

Configuration parameters

  • url — Server URL (required)
  • credentials — API ID (required)
  • org_key — Organization Key (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • add_audit_logs — Include Audit Logs
  • max_alerts — Maximum number of alerts per fetch
  • max_audit_logs — Maximum number of audit logs per fetch

Commands (1)

  • carbonblack-endpoint-standard-get-events

    Fetch alerts and audit logs from Carbon Black Endpoint Standard.