Investigate EDR alerts from Carbon Black

Get EDR alerts for applications and services that Carbon Black has started or stopped on a system. Enrich application information using VirusTotal, generate a ticket in Jira and record the details, then isolate a machine if deemed malicious.

Tools

Jira Software, PagerDuty, VirusTotal

Created by

Shaun Finn (Tines)

How it works

Import this story to your tenant, from where you can adapt it to meet your unique needs.

Import

Loading story...