Skip to main content

How to integrate Carbon Black with Defense.com

This guide will run you through how to integrate Carbon Black with Defense.com.

Written by Alan Butcher
Updated today

Before you get started

Before beginning the integration, you will need Admin access to your Carbon Black Cloud console in order to create the necessary API keys.

Creating an API Key

  1. Log in to your Carbon Black Cloud console.

  2. To create an API Key, go to Settings > API Access > API Keys tab.

  3. Select Add API Key from the far right.

  4. Give the API Key a unique name and select the access level. We'll need two API keys for this integration. One with the SIEM access level and one with the API access level.

  5. Hit save, and you will be provided with your API Key Credentials:

  • API Secret Key

  • API ID

Completing the integration

Once you have created both API keys, please reach out to our Technical Support team and share the following details securely using one time secret. Our team will then complete the integration and confirm that Carbon Black is logging to the SIEM platform.

  • Carbon Black Cloud API ID

  • Carbon Black Cloud API Secret Key

  • Carbon Black Cloud SIEM ID

  • Carbon Black Cloud SIEM Secret Key

  • Carbon Black Cloud Server URL - note this is not the URL to the web UI, but the API URL (for example, https://api-prod05.conferdeploy.net)

And that's it! You've successfully integrated Carbon Black with Defense.com 🎉

Did this answer your question?