VMware Carbon Black LiveOps

VMware Carbon Black LiveOps is part of the CB Predictive Security Cloud™ (PSC), and allows customers to query endpoints and remediate issues in real time.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the CarbonBlack LiveOps server.

2. Organization Key (required) - Specify your organization key. You can find your organization key in the VMware Carbon Black Cloud Console under Settings > API Keys.

3. API ID and API Secret Key (required) - Specify the API ID and API Secret Key associated with a user account that has permissions to fetch assets. For details on generating the API ID and the API Secret Key, see Carbon Black Cloud API Access Authentication.

4. Wait for Query to Finish (optional, default: 24) - Specify the number of hours for the fetch process to run in the background.

5. Fetch Interval in Hours (optional, default: 1) - Specify by the number of hours the fetch results should update.

6. Devices OS (required, default: WINDOWS) - Select the Operating System of the devices from the dropdown.

7. Verify SSL (required, default: false) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

8. HTTPS Proxy (optional, default: empty) - Connect the adapter to a proxy instead of directly connecting it to the domain.

9. HTTPS Proxy User Name (optional, default: empty) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

10. HTTPS Proxy Password (optional, default: empty) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

APIs

Axonius uses the Live Query API - Carbon Black Developer Network.

Supported From Version

Supported from Axonius version 4.5