Back to Blogs

Announcing VMware Carbon Black Cloud App v1.1.0 for Splunk SOAR

Posted on May 5, 2023


We are proud to announce VMware Carbon Black Cloud platform with Splunk SOAR version 1.1.0. This release adds new contextual actions that can be used in custom user-defined playbooks and a new CBC Assets playbook which helps users automate the orchestration and remediation of alerts in Carbon Black Cloud from based on endpoint device details.

New features
  • 7 new actions:
    • dismiss future alerts
    • get asset info
    • get cleared eventlogs
    • get rdp info
    • get scheduled tasks
    • list logged users
    • list persistence locations
  • A new CBC Assets playbook to help users automate the orchestration and remediation of alerts in Carbon Black Cloud from within Splunk SOAR based on endpoint device details.

Resources:

Have questions or feedback?