The VMware Carbon Black EDR connector integration pulls Active indicators from a ThreatQ data collection and imports them into Carbon Black EDR as Threat Reports.
The connector is installed and run on the Carbon Black EDR server.
The connector is only supported for VMware Carbon Black EDR versions 6.5.2+ in an on-premise deployment