Welcome to 2024! We’re charging into the year with plenty to help keep those New Year Resolutions about integrating your ecosystem!

New on the Developer Network

• Azure Destination for the Carbon Black Cloud Data Forwarder
  • Azure BLOB Storage can now be configured as the destination on the Data Forwarder for Alerts and Watchlist Hits.
  • Two destination options - Azure Blob Storage and AWS S3 - for Alerts and Watchlist Hits.
  • Learn more in the User Guide
• v2.0.0 of Carbon Black Cloud Splunk App released Carbon Black Cloud Splunk App v2.0
  • Update now to get the new Alert format with all the new metadata in the v7 API and Data Forwarder Schema v2.0.0.
  • Use a Custom API Access Level for Audit Log ingest and Live Response actions, restricting API access to only the operations you want to enable
  • Check out the Upgrade Guide - there are some breaking changes to be aware of
• Carbon Black Cloud SDK v1.5.1
  • Support for Asset Groups, a new way of organizing devices and applying specific policies to them
  • Working with Grouped Alerts
  • New and extended guides and sample scripts
  • New export methods for large sets of Devices and Live Query results
  • See the Changelog and full documentation

More New Stuff

• Recommended practices to secure API Access
• Location Aware Firewall Rules in Carbon Black Cloud
• Carbon Black Cloud QRadar App v2.2.1 - bug fix release

Update to use the Latest APIs and Forwarder Schema

• Legacy API Access Levels and Deprecated APIs are being deactivated this year
  • Update now to get the most out of Carbon Black Cloud data
  • Everything you need about the changes - affected APIs, Access Level types, dates, and benefits of the replacement versions - are in the Migration Guides
  • July 31, 2024 is the deactivation date for Alerts API v6 and Alert Data Forwarder schema v2, as well as integrationServices/v3 Device, Policy and Live Response routes
  • October 31, 2024 is the deactivation date for the Notifications v3 API

Coming Soon

• Updated Apps
  • Carbon Black Cloud App for QRadar v2.3
  • Carbon Black Cloud Apps for ServiceNow
• New Data Forwarder for Auth Events
• Policy extensions for Event Reporting and Sensor Operation Exclusions
• Follow the Roadmap
• Find all the recent announcements here

Subscribe to the newsletter

Sign-up here to get updates to your mailbox each month