Welcome to the Carbon Black Cloud™ documentation! Carbon Black Cloud™ is a cloud native endpoint and workload protection platform (EPP and CWP) that combines the intelligent system hardening and behavioral prevention needed to keep the emerging threats at bay.

Quick Links:
Console Documentation
    Release Notes
    Carbon Black Cloud User Guide
  
Carbon Black Container Content
   Container User Guide: HTML, PDF
    Kubernetes Sensor 3.1.0 Release Notes
    Containerized Sensor 2.15.91-3.1.0 Release Notes
    Operator 6.1.0 Release Notes
    CLI 1.11.0 Release Notes
    Kubernetes Sensor OER
   
Carbon Black Workloads Content
   Workloads User Guide: HTML, PDF
    Latest Workloads Release Note
    Workloads OER
    Vulnerability Management OER
   Sensor Gateway User Guide: HTML, PDF
    Latest Sensor Gateway Release Note
    Sensor Gateway OER
  
XDR Content
   XDR User Guide: HTML, PDF
   
Managed Detection & Response (MDR) Content
    MDR FAQ
   
Managed Threat Hunting (MTH) Content
    MTH Getting Started Guide
    MTH FAQ
   

–––– Sensor Content ––––

Sensor Installation
   Sensor Installation Guide
  
Latest Sensor Release Notes
    Linux Sensor 2.16.0
    Windows Sensor 4.0.1.1428
    Linux Sensor 2.15.2
    macOS Sensor 3.8.0.58
     
Sensor Operating Environment Requirements
    Windows Sensor OER (Desktop)
    Windows Sensor OER (Server)
    Linux Sensor OER
    macOS Sensor OER
    Sensor Lifecycle Support Policy
   
Product Operating Environment Requirements
    Endpoint Standard OER
    Audit and Remediation OER
    Enterprise EDR OER
    Prevention OER
   
Additional Resources
    Carbon Black Cloud on VMware Cloud Services Platform  
    Carbon Black Cloud on AWS GovCloud (US)  
    Carbon Black Developer Network
    Technical Support
  

Contacting Carbon Black Support

Log in to the Broadcom Support portal, and click My Cases. For detailed instructions regarding the use of the Broadcom Support Portal, see the Broadcom Support Portal Getting Started Guide.

For additional options and contact methods, see Contact Support.

Searching the Carbon Black Knowledge Base

  1. Navigate to https://support.broadcom.com/web/ecx/search
  2. In the left pane, under Product, search for and select the product or products related to your search.
  3. At the top of the page, enter the search terms.
  4. Click Search.

KBs that match your search criteria display on the right.

Downloading Carbon Black Software

To download Carbon Black product software:

  1. Log into the Broadcom customer portal and then select Cyber Security Software from the drop-down at the top of the page.

  2. Select My Downloads from the menu on the left to see the list of products that you are entitled to download for the selected division.
    Important: If you do not see the product you are looking for in your download list, you should contact Broadcom's Global Customer Assistance. Do one of the following:
  3. Navigate to, or search for the Carbon Black product you want to download. Select the software you intend to download.
  4. Before you can download, you must agree to the Broadcom Terms and Conditions. Afterwards, click the download arrow to commence the download.

    Important: In the above example, App Control Server is used as an example. Adjust accordingly.
Tip: For additional assistance with downloads, see: Product Download Help

Product Announcement: In-Console Managed Detection & Response (May, 2024)

The Managed Detection and Managed Detection & Response experiences are getting a major upgrade! MD/R will be built into the Carbon Black Cloud console’s alert page, alert APIs, and data forwarder.

The table below compares the current (Legacy) MDR experience with the new, in-console, MDR experience.

Attention: For a detailed explanation of these impending changes, an excellent demonstation video, and the opportunity to provide feedback, please see: https://portal.productboard.com/b6blafajly4nkk5mkt8shcpd/c/125-in-console-managed-detection-response.
Feature Legacy experience NEW, In-Console MDR
Real-time alert status N/A CBC console: alert page
Alert Notifications By email
  • Likely threats only

Configured in Settings → Managed Detection

By email
  • Likely threats
  • Unlikely Threats
  • New analyst comments

Configured in Settings → Notifications

Analyst Comments Email
  • Reply to email (Managed Detection & Response only)
CBC console: alert notes
  • Reply in console (Managed Detection & Response only)
Daily Summary PDF by email
  • List of alerts (Unlikely threats limited to top 100)
PDF by email
  • Metrics of Likely threats & MDR eligible alerts
Monthly Report PDF by email
  • Metrics for all alerts, industry comparison, asset counts
PDF by email
  • Metrics of Likely threats & MDR eligible alerts, industry comparison, asset counts
APIs & Integrations N/A Public APIs & Data Forwarder