Carbon Black

Several Carbon Black DSMs can be integrated with IBM QRadar

Carbon Black
To collect events from Carbon Black, you must install and configure cb-event-forwarder to send Carbon Black events to IBM Security QRadar.
Carbon Black Bit9 Parity
To collect events, you must configure your Bit9 Parity device to forward syslog events in the LEEF format.
Bit9 Security Platform
Use the IBM QRadar SIEM DSM for Carbon Black Bit9 Security Platform to collect events from Carbon Black Bit9 Parity devices.