Notifications
Clear all
Topic starter
27/07/2026 11:52 am
Looking at the official integration list for Carbon Black Cloud feels a bit like a menu where half the items are "under development." 😅
In practice, which ones have you all found to be truly operational and valuable? Specifically:
* **Splunk** - Is the data ingestion smooth and useful for your SOC, or clunky?
* **ServiceNow** - Does the ticket creation and workflow automation actually save time?
* **Any cloud workload integrations** (AWS GuardDuty, etc.) - Do they provide real context, or just add noise?
I'm trying to map out the true TCO and operational benefit. Bonus points if you've compared the setup/maintenance effort versus the payoff.