Useful Splunk SIEM Queries for Vulnerabilities

Carbon Black Cloud can provide a vulnerability assessment of all workloads or endpoints. The assessment goes beyond traditional CVSS scores to include risk-based prioritization so your organization can focus on resolving vulnerabilities that are most likely to result in compromise.

Required Product: Vulnerability Management

Required Data: Vulnerabilities (App Input)

The Carbon Black Cloud Splunk SIEM App vulnerabilities input queries the Get Vulnerability List API and returns the Device Vulnerability List schema.