February 2024 Newsletter
Happy International Women’s Day!
New on the Developer Network
Splunk SOAR App 2.0 for Carbon Black Cloud
- Updated to use the Alerts v7 API
- Enrich Alerts with Observation data
- Get scheduled tasks
- Get the details here
Authentication Event Data Forwarder
- Send all Windows Authentication Events
- AWS S3 and Azure Blob Storage Container destinations are supported
- Use semantic versioning to opt in or out of automated updates
- Read the announcement here
More New Stuff
- Event Reporting and Sensor Operations Exclusions
- Increase the ability of Endpoint Standard and Enterprise EDR customers to tune product behavior to resolve operational issues and meet business needs
- Read the announcement here
Update to use the Latest APIs and Forwarder Schema
Legacy API Access Levels and Deprecated APIs are being deactivated this year
- Update now to get the most out of Carbon Black Cloud data
- Everything you need about the changes - affected APIs, Access Level types, dates, and benefits of the replacement versions - are in the Migration Guides
- July 31, 2024 is the deactivation date for Alerts API v6 and Alert Data Forwarder schema v1, as well as integrationServices/v3 Device, Policy and Live Response routes
- October 31, 2024 is the deactivation date for the Notifications v3 API