Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt

Use this file to discover all available pages before exploring further.

The BlueApp for Carbon Black EDR enhances the threat detection capabilities of USM Anywhere by collecting and analyzing log data from your Carbon Black EDR, and provides orchestration actions to streamline incident response activities. This BlueApp combines USM Anywhere advanced threat detection and the ability to automatically isolate compromised systems with Carbon Black EDR.
Edition: The BlueApp for Carbon Black EDR is available in the Standard and Premium editions of USM Anywhere. See the Affordable pricing to fit every budget page for more information about the features and support provided by each of the USM Anywhere editions.
Warning: If the BlueApp fails and you receive a message informing you that it has not been loaded, please contact LevelBlue Technical Support to solve the problem.
This topic discusses these subtopics: Collecting Logs from Carbon Black EDR Configuring the BlueApp for Carbon Black EDR BlueApp for Carbon Black EDR Actions Creating Carbon Black EDR Response Action Rules Viewing Alarms with Applied Carbon Black EDR Response Actions