VMWare Carbon Black

VMWare Carbon Black is an endpoint protection software. 

More detailed documentation is on its way. In the meantime,  see the available steps and templates below. 

Available steps

These are the premade steps for Carbon Black. Don't see the step you need? No problem, you can easily create custom steps. 

• Add a certificate to whitelist
• Add hash to blacklist
• Add hash to whitelist
• Add IT tool to whitelist
• Bulk delete reputation overrides
• Change quarantine status for devices
• Delete reputation override
• Disable background device scan
• Enable background device scan
• Get alert information
• Get device information
• Get reputation override details
• List reputation overrides
• Search alerts
• Search devices
• Update alert

Available templates

• Compliance - find unmanaged devices in Intune and Carbon Black
• Check for new Carbon Black alerts and handle
• Ask a user to acknowledge activity on Slack (Carbon Black)