CarbonBlackEndpointStandardEventCollector

Endpoint Standard (formerly called Carbon Black Defense), a Next-Generation Anti-Virus + EDR. Collect Anti-Virus & EDR alerts and Audit Log Events.

Category

Endpoint

Pack

CarbonBlackDefense

Configuration parameters

• url — Server URL (required)
• credentials — API ID (required)
• org_key — Organization Key (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• add_audit_logs — Include Audit Logs
• max_alerts — Maximum number of alerts per fetch
• max_audit_logs — Maximum number of audit logs per fetch

Commands (1)

• carbonblack-endpoint-standard-get-events — Fetch alerts and audit logs from Carbon Black Endpoint Standard.