Can you export data from Carbon Black EDR to Arctic Wolf?

Issue

I would like to export data from VMware Carbon Black EDR to Arctic Wolf environment to track alerts and other logs.

Environment

VMware Carbon Black EDR (CB Response)

Resolution

Arctic Wolf only supports VMware Carbon Black Cloud environments for exports. The Arctic Wolf application will not be able to retrieve EDR data over API.

You have the option to transition to VMware Cloud applications or create another server that can retrieve the exported data from EDR using a tool like Canary Exporter and then submit the data to Arctic Wolf. 

Cause

Arctic Wolf would only accept API keys from Carbon Black Cloud infrastructure that includes an organization ID. Refer to Arctic Wolf documentation for more information: https://docs.arcticwolf.com/cloud/carbon_black_credentials.html