Article Number: 000129699
VMware Carbon Black Cloud allows for APIs to be generated to output various sets of data from the infrastructure to third-party applications. Secureworks has introduced the ability to consume these events through an API receiver within the Secureworks Taegis XDR (eXtended Detection and Response) console.
Configuration of the Event Forwarder from VMware Carbon Black Cloud to Secureworks TDR requires administrators to Create an Access Level and an API Key with Carbon Black. Once completed, then you can Create the Integration Within Secureworks Taegis XDR.
For more information, click the appropriate action.
Category | Permission | Notation | Selection boxes to enable |
---|---|---|---|
Device | Quarantine | device.quarantine |
Execute |
Device | General Information | device |
Read |
Event Forwarding | Settings | event-forwarder.settings |
Create, Read, Update, Delete |
SCWS_TDR
) used in the example screenshot may differ in your environment.
Prod01
- used for legacy Carbon Black customers in North AmericaProd02
- used for legacy Carbon Black customers in North AmericaProd05
- used for current and new Carbon Black customers in North AmericaTo contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.
Secureworks, VMware Carbon Black
10 Jun 2024
10
How To