Back to Blogs

New versions of the Carbon Black Cloud Apps for ServiceNow

Posted on February 29, 2024


New versions of the Carbon Black Cloud Apps for ServiceNow are available!

  • ServiceNow SecOps App v3.0.0
  • ITSM App v3.0.0
  • Vulnerability Response v2.0.0

New Features

ITSM App Version 3.0.0

  • Updated to use the Alerts v7 API and Data Forwarder Alert v2.0.0 schema
  • New dashboards that show metrics about Carbon Black Cloud Alerts, ITSM Security Incidents and Assets
  • Updated to be compatible with ServiceNow Vancouver release
  • Dismiss Alerts is now Close Alerts
  • New User Roles to limit access to SOAR actions

SecOps App Version 3.0.0

  • Updated to use the Alerts v7 API and Data Forwarder Alert v2.0.0 schema
  • New dashboards that show metrics about Carbon Black Cloud Alerts, SecOps Security Incidents and Assets
  • Updated to be compatible with ServiceNow Vancouver release
  • Dismiss Alerts is now Close Alerts
  • New User Roles to limit access to SOAR actions

Vulnerability Response App Version 2.0.0

  • Updated to be compatible with ServiceNow Vancouver release
  • New dashboards that show metrics about vulnerabilities

Breaking Change

If you are ingesting Alerts using the Data Forwarder and AWS S3 option then the Carbon Black Cloud Data Forwarder Configuration must be updated to the Alert Forwarder Schema v2.0.

ServiceNow will not ingest the Forwarder Alert Schema 1.0 successfully.

Follow these steps:

  1. Go to Carbon Black Cloud > Settings > Data Forwarders
  2. Find the data forwarder used by ServiceNow
  3. Click the pencil to edit the forwarder
  4. Change the schema selection to 2.0.0 and save the forwarder
  5. Upgrade the ServiceNow app
  6. Verify alerts are being ingested correctly

Resources

For more information, check out the resources below:

Have questions or feedback?

  • Subscribe to the Developer Network Newsletter