---
title: VMware Carbon Black Cloud Endpoint Standard
description: ''
slug: /help/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/
canonical: https://www.sumologic.com/help/docs/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/
---
import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/vmware-carbon-black-cloud-endpoint-standard.png')} alt="VMware Carbon Black Cloud Endpoint Standard icon" width="70"/>

***Version: 2.1  
Updated: Oct 05, 2023***

VMware Carbon Black Cloud Endpoint Standard Integration allows security operators to collect information and take action on remote endpoints in real time.

## Actions

* **Ban Process Hash** (*Containment*) - Ensure a malicious process cannot be executed again across your environment.
* **Get Enriched Events** (*Enrichment*) - Get the enriched events associated with an Analytics alert, which includes critical alert triage information such as the process cmdline.
* **Get Policies** (*Enrichment*) - List all the available Policies.
* **List Banned Hashes** (*Enrichment*) - List all the available Banned Hashes.
* **Update Policy Definition** (*Containment*) - Add a process path to the "allow" rules.

## VMware Carbon Black Cloud Endpoint Standard configuration

1. Log in to the [CBC Console](https://defense.conferdeploy.net).
1. Navigate to the **Settings**  menu, and then click on  [**API Access**](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-user-guide-tile/GUID-9620FAB7-FE70-45DE-9CAB-590FA358721F-en/GUID-7AA95653-EF83-4F49-B11F-F984F7D62CB8-en/GUID-F3816FB5-969F-4113-80FC-03981C65F969-en.html).<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/vmware-carbon-black-cloud-endpoint-standard-1.png')} style={{border:'1px solid gray'}} alt="Vmware carbon black cloud endpoint standard" width="300"/>
1. From the **API ACCESS** page, click on Add API Key. <br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/vmware-carbon-black-cloud-endpoint-standard-2.png')} style={{border:'1px solid gray'}} alt="Vmware carbon black cloud endpoint standard" width="700"/>
1. Populate the name, Access Level type, and click the Save button. <br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/vmware-carbon-black-cloud-endpoint-standard-3.png')} style={{border:'1px solid gray'}} alt="Vmware carbon black cloud endpoint standard" width="600"/>
1. Copy the API Credentials (API ID and API Secret Key).<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/vmware-carbon-black-cloud-endpoint-standard-4.png')} style={{border:'1px solid gray'}} alt="Vmware carbon black cloud endpoint standard" width="400"/>
1. Also you will see the ORG KEY from **API Access,** you need to copy it.<br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/vmware-carbon-black-cloud-endpoint-standard/vmware-carbon-black-cloud-endpoint-standard-5.png')} style={{border:'1px solid gray'}} alt="Vmware carbon black cloud endpoint standard" width="700"/>

## Configure VMware Carbon Black Cloud Enterprise EDR in Automation Service and Cloud SOAR

import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';

<IntegrationsAuth/>
* <IntegrationLabel/>
* **API URL**. Enter the URL to the API of the VMware Carbon Black Cloud Endpoint Standard instance, for example, `https://defense.conferdeploy.net`.

* **Organization Key**. Enter the [organization key](https://developer.carbonblack.com/reference/carbon-black-cloud/authentication/#org-key) you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration).

* **API ID**. Enter the [API ID](https://techdocs.broadcom.com/us/en/carbon-black/cloud/carbon-black-cloud/index/cbc-user-guide-tile/GUID-9620FAB7-FE70-45DE-9CAB-590FA358721F-en/GUID-7AA95653-EF83-4F49-B11F-F984F7D62CB8-en/GUID-F3816FB5-969F-4113-80FC-03981C65F969-en.html) that you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration).

* **API Secret Key**. Enter the secret for the API ID that you [copied earlier](#vmware-carbon-black-cloud-endpoint-standard-configuration).
* <IntegrationTimeout/>
* <IntegrationCertificate/>
* <IntegrationEngine/>
* <IntegrationProxy/>

<img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/misc/vmware-carbon-black-cloud-enterprise-standard-configuration.png')} style={{border:'1px solid gray'}} alt="VMware Carbon Black Cloud Endpoint Standard configuration" width="400"/>

For information about Carbon Black Cloud, see [Carbon Black Cloud documentation](https://techdocs.broadcom.com/us/en/carbon-black/cloud.html).

## External Libraries

* [carbon-black-cloud-sdk-python](https://github.com/carbonblack/carbon-black-cloud-sdk-python/blob/develop/LICENSE)

## Change Log

* May 11, 2022 - Refactored all actions with CBC SDK
* June 8, 2022 - Updated integration doc
* October 5, 2023 (v2.1) - Updated the integration with Environmental Variables