0
10.3.7
Yokohama, Xanadu, Washington DC, Vancouver Patch 4, Vancouver
The Carbon Black Incident Enrichment integration for Security Operations facilitates the investigation of a security incident by querying logs for potentially malicious indicators.
The Carbon Black Incident Enrichment integration has the following key features:
- Get Running Processes workflow
- Isolate Host workflow
Changed:
- Migration of Workflows to Flow Designer flows.
Before using the Carbon Black Incident Enrichment integration, you must activate the plugin and add the appropriate Endpoint Base URL and MID server.