VMware Carbon Black Cloud

July 16, 2026

VMware Carbon Black Cloud: DCR Type Mismatch Caused Silent Data Loss in Alerts and Watchlist Streams

A type mismatch between the Carbon Black API (numeric severity, long PIDs) and the DCR schema (string) caused ingestion failures for the Alerts and Watchlist streams; v3.0.9 corrects the schema and adds tostring() casts in the transformKql. Read More →

April 14, 2026

Four Legacy Azure Function Connectors Marked for Deprecation - Migration to CCF Required

Microsoft has deprecated Azure Function-based connectors for Okta SSO, SentinelOne, Sophos Endpoint Protection, and VMware Carbon Black Cloud in favor of CCF alternatives. Read More →

March 25, 2026

VMware Carbon Black Cloud Connector: Title Update to Clarify CCF Usage

Cosmetic title change to clarify the connector uses Codeless Connector Framework for AWS S3 ingestion. Read More →