Carbon Black - Incident Enrichment integration

Use the Carbon Black integration to investigate and respond to security incidents using APIs to query and interact with endpoints associated with security incidents.

Find Carbon Black- Incident Enrichment integration resources

• Get started with the Carbon Black - Incident Enrichment integration
• Security Operations Carbon Black Integration - Get Running Processes Flow
• Security Operations Carbon Black Integration - Isolate Host Flow
• Security Operations Carbon Black Integration- Remove Host Isolation Flow

Understand integration concepts

• Types of ServiceNow integrations provided
• Security Operations workflow triggers

Get help from ServiceNow resources

• Ask or answer questions in the Security Operations community
• Search the Known Error Portal for known error articles
• Contact Customer Service and Support
• Upgrade to Madrid