Posted on July 6, 2022
VMware Carbon Black’s latest integrations combine industry-leading endpoint telemetry and response actions with ServiceNow’s solutions for IT and Security teams to accelerate cross-functional workflows through automation.
IT and Security teams can now leverage Carbon Black Cloud telemetry and endpoint response actions from within their ServiceNow console and workflows, streamlining hand-offs between analysts and standardizing common workflows.
The apps are now available in the ServiceNow app store and provide joint customers with access to pre-built ticketing
and incident response workflows powered by Carbon Black Cloud data and response actions.
Create Security Incidents from Alerts
IT practitioners can now enrich investigations with security context from Carbon Black, including device content and endpoint alerts.
Security Operations teams can now automate the creation of ServiceNow Security Incident tickets from Carbon Black Cloud alerts and orchestrate response actions all from a single console.
These latest applications enable customers of ServiceNow and Carbon Black to get more value out of the existing products in their stack, while also accelerating the time it takes to detect and respond to threats.
Trigger SOAR Actions from Alerts
For more information, check out the resources below: