VMware Carbon Black Cloud
by VMware LLC
Streamline security operations workflows with Carbon Black Cloud endpoint context and response actions directly in ServiceNow
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2025-11-02 | 22 | - |
| 117 days of no change | ||
| 2025-07-07 | 21 | +1 |
| 32 days of no change | ||
| 2025-06-04 | 20 | +1 |
| 14 days of no change | ||
| 2025-05-20 | 19 | +1 |
| 83 days of no change | ||
| 2025-02-25 | 18 | +1 |
About
The VMware Carbon Black Cloud app integrates relevant endpoint alerts, device context, and vulnerability information directly into ServiceNow ticketing and incident response workflows to streamline collaboration and task management for security teams. This app is installed automatically with the VMware Carbon Black Cloud for IT Service Management app, the VMware Carbon Black Cloud for Security Operations app, or the VMware Carbon Black Cloud for Vulnerability Response app to access the full capabilities of these integrations.
By automating the creation of ITSM incident tickets, SecOps security incidents, VR vulnerable items, and CMDB configuration items based on data from Carbon Black Cloud, these applications eliminate the need to manually correlate information between systems by seamlessly transferring endpoint alerts, vulnerabilities, and asset context from Carbon Black to ServiceNow’s ITSM, SecOps, VR, and CMDB modules.
VMware Carbon Black Cloud:
* The VMware Carbon Black Cloud is a cloud-native endpoint, workload, and container protection platform that combines the intelligent system hardening and behavioral prevention needed to keep emerging threats at bay, using a single, easy-to-use console. By analyzing more than 1 trillion security events per day, VMware Carbon Black Cloud proactively uncovers attackers’ behavior patterns and empowers defenders to detect and stop emerging attacks.
* https://www.vmware.com/products/carbon-black-cloud-endpoint.html
Key Features
Dashboard
* Dashboard for viewing metrics related to alerts, assets, incidents, security incidents and vulnerabilities.
Carbon Black Cloud Alert Ingestion
* Customizable alert ingestion from Carbon Black Cloud to ServiceNow via the Alerts API or Data Forwarder.
* Multi-tenancy: domain separation to configure ingestion and isolation of Alerts data from multiple Carbon Black Cloud organizations.
Carbon Black Cloud Asset Inventory Ingestion
* Creation of ServiceNow Configuration Items based on Carbon Black Cloud endpoints and workloads.
* Synchronization of asset context from Carbon Black Cloud to the ServiceNow Configuration Management Database (CMDB).
* Attachment of Carbon Black Cloud Assets to ServiceNow ITSM, SecOps, and VR ticket types.