Broadcom Carbon Black provides next-generation anti-virus (NGAV), endpoint detection and response (EDR), advanced threat hunting, and endpoint-focused vulnerability assessment within a single console using a single sensor. The Balbix integration with Broadcom Carbon Black ingests IT infrastructure assets, software information, and associated vulnerability information discovered by Carbon Black.
Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.
Integration Summary
This table provides a summary of the Balbix integration for the Broadcom Carbon Black connector.
Integration Type | Fetch: An inbound API integration used to fetch IT infrastructure assets, software and vulnerability information. |
Types of Assets Fetched | Host devices including servers and virtual machines. |
Types of Data Fetched | Asset names, interface information (MAC address, IP address), operating system (OS) information, software information, vulnerability information, all relevant timestamps (e.g., first observed, last observed). |
Prerequisites
To configure the Balbix connector, you must first create Broadcom Carbon Black API credentials with the appropriate permissions. These credentials are required for completing the configuration process. Here are the steps you need to complete:
Verify authorization permissions: Ensure you have the necessary permissions to generate an API key.
Create API keys: Set up a custom role and an OAuth app to generate the required API keys.
Required Permissions
To generate an API key, ensure you have the following authentication permissions:
Devices
Vulnerability Assessment
User Management (read only)
Create API Credentials Using OAuth
Follow these steps to create API credentials for Broadcom Carbon Black:
Create a custom role and assign the required permissions.
Create an OAuth app in the Cloud Services Platform (CSP).
Generate an OAuth App ID and Secret by following the CSP OAuth App flow in the Broadcom Carbon Black OAuth Access Control documentation.
For more details, see the following references:
For assistance with building base URLs, see the Build the Base URLs section in the Carbon Black Cloud API Access documentation.
For assistance with identifying the org key, see the Org Key section in the Carbon Black Cloud API Access documentation.
Create and Configure the Connector
After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for Broadcom Carbon Black.
Step 1: Select the Connector
Start by selecting a connector using the steps outlined below:
Go to Data Sources from the left navigation bar.
In the Connectors table, click + Add Connector.
Click Select a Connector to Configure to expand the window and view the list of available connectors.
Click the + icon on the Broadcom Carbon Black tile.
Click Next to configure the connector.
Step 2: Configure the Connector
Configure the connector using the steps outlined below.
API Reference Documentation
To learn more about the Broadcom Carbon Black API, see the references listed below: