CB PSC: Are the Splunk Apps CIM Compliant?

[#1]

Environment

• CB PSC Web Console: All Versions
• CB Defense Splunk App: All Versions
• CB ThreatHunter Splunk App: All Versions

Question

Are the Splunk Apps for the CB PSC CIM compliant?

Answer

• The CB ThreatHunter App is CIM Compliant for Alerts
• The CB Defense App is not CIM Compliant

Additional Notes

There is work being done to unify both of the CB Splunk Apps into one combined app. CIM compliance is on the roadmap for this new app.

Related Content

Carbon Black Cloud: What Splunk Apps/Add-Ons are needed?
CB ThreatHunter: How to Setup and Configure Splunk Enterprise to Receive Data
CB Defense: How to Setup and Configure Splunk Enterprise to Receive Data