{
  "Name": "VMware Carbon Black Cloud",
  "Author": "Microsoft - support@microsoft.com",
  "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\" width=\"75px\" height=\"75px\">",
  "Description": "The [VMware Carbon Black Cloud](https://www.broadcom.com/products/carbon-black/threat-prevention/carbon-black-cloud) solution for Microsoft Sentinel allows ingesting Carbon Black [Audit](https://developer.carbonblack.com/reference/carbon-black-cloud/cb-defense/latest/rest-api/#audit-log-events), [Notification](https://developer.carbonblack.com/reference/carbon-black-cloud/cb-defense/latest/rest-api/#notifications) and [Event](https://developer.carbonblack.com/reference/carbon-black-cloud/platform/deprecated/data-forwarder-config-api/) logs into Microsoft Sentinel.\n\n**Underlying Microsoft Technologies used:**\n\nThis solution takes a dependency on the following technologies, and some of these dependencies either may be in [Preview](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) state or might result in additional ingestion or operational costs:\n\na. [Azure Monitor HTTP Data Collector API](https://docs.microsoft.com/azure/azure-monitor/logs/data-collector-api)\n\nb. [Azure Functions](https://azure.microsoft.com/services/functions/#overview)",
  "Data Connectors": [
    "Data Connectors/VMwareCarbonBlackCloud_ccp/CarbonBlack_DataConnectorDefinition.json",
    "Data Connectors/VMwareCarbonBlack_API_FunctionApp.json"
  ],
  "Analytic Rules": [
    "Analytic Rules/CriticalThreatDetected.yaml",
    "Analytic Rules/KnownMalwareDetected.yaml"
  ],
  "Workbooks": [
    "Workbooks/VMwareCarbonBlack.json"
  ],
  "Playbooks": [
    "Playbooks/CarbonBlackConnector/azuredeploy.json",
    "Playbooks/CarbonBlack-TakeDeviceActionFromTeams/azuredeploy.json",
    "Playbooks/CarbonBlack-QuarantineDevice/azuredeploy.json",
    "Playbooks/CarbonBlack-DeviceEnrichment/azuredeploy.json"
  ],
  "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\VMware Carbon Black Cloud",
  "Version": "3.0.10",
  "Metadata": "SolutionMetadata.json",
  "TemplateSpec": true,
  "Is1Pconnector": false
}