Connect

Connect

VMware

VMware

with your entire stack through Mindflow

with your entire stack through Mindflow

Introducing the CarbonBlack agent, a domain expert tailored exclusively to VMWare CarbonBlack's full API spectrum. It autonomously reasons over operations like isolating sensors by sensor ID (PUT /api/v1/sensor/{{sensor_id}}), retrieving detailed threat feeds (GET /api/v1/feed/{{feedid}}), and managing investigations (POST /api/investigation). For example, it can isolate a compromised host's sensor, retrieve associated threat report details, and add new investigations strictly using CarbonBlack's operations. Additionally, it adeptly manages watchlists by creating or updating them via the API. These tasks utilize explicit CarbonBlack objects, such as sensors, threat feeds, and investigations, with direct mapping to the service's documented API methods.