The SecOps App Release Notes describe new and changed features for the SecOps module.

Breaking Changes

Data Forwarder Alert v2.0.0 schema: If you are ingesting Alerts using the Data Forwarder and AWS S3 option, then you must update the Carbon Black Cloud Data Forwarder configuration to use the Alert Forwarder Schema 2.0. For steps to do this, see ServiceNow 3.0.0 Release Notes.

Features and Updates

  • Updated to use the Alerts v7 API
  • New dashboards that show metrics about Carbon Black Cloud Alerts, ITSM Security Incidents and Assets
  • Updated to be compatible with ServiceNow Vancouver release
  • Dismiss Alerts is now Close Alerts
  • New User Roles to limit access to SOAR actions