Carbon Black Cloud: How to Enable Data Forwarders

[#1]

Environment

• Carbon Black Cloud Console: All Versions
• Data Forwarder
• Amazon Simple Storage Service (Amazon S3)

Objective

To enable a Data Forwarder within Carbon Black Cloud

Resolution

For steps utilizing the Carbon Black Cloud Console see our Product Documentation (recommended)
For steps utilizing the Carbon Black Cloud API see our Developer Post

Additional Notes

• Once forwarders are configured, a SIEM can be configured to collect this data from the Amazon S3 bucket

Related Content

Data Forwarder Data Guide - Carbon Black Developer Network
Carbon Black Cloud API Access - Carbon Black Developer Network
Data Forwarder Configuration API - Carbon Black Developer Network
Creating a bucket - Amazon Simple Storage ServiceCreating a bucket - Amazon Simple Storage Service
https://learning.getpostman.com/docs/postman/collection-runs/working-with-data-files/
Configuring an AWS S3 Bucket for the Event Forwarder
Postman Collection and Environment for Carbon Black Cloud Forwarder
Carbon Black Cloud: What URLs are used to access the APIs?
CB ThreatHunter: What URLs are used to access the API?