Integrating with Malwarebytes

Introduction

Follow this article to integrate Blackpoint with Malwarebytes. The integration consists of three main steps:

  1. Acquiring the Client ID & Secret
  2. Adding the Integration in the Blackpoint Portal
  3. Verifying your integration

Prerequisites

  • You must have Administrator-level access in Malwarebytes.

Instructions

Acquiring the Client ID & Secret

  1. Log into the Malwarebytes OneView platform.
  2. On the left side menu, navigate to Settings > APIs & Services.
  3. In the OAuth 2.0 Client IDs screen, click the plus (+) icon in the top-right corner.
  4. In the Create OAuth Client ID pop-up window:
    1. Enter MWB API Client in the Application Name field.
    2. Click the Access drop-down menu and select the "read", "write", and "execute" checkboxes.
    3. Click the Submit button.
  5. An OAuth Client pop-up window will appear showing the newly created client ID and client secret. Click the copy buttons next to each. Save or paste this information in a secure location for later use. Click OK.

Adding the Integration in the Blackpoint Portal

  1. In the Blackpoint Portal, navigate to Customer in the left-hand menu.
  2. In the Customer List section, find the customer who needs the Malwarebytes integration. You will be redirected to the Customer Details page.
  3. In the Integrations section, click the +Add button.
  4. In the Add Integration pop-up, select Malwarebytes in the drop-down menu and click Next.
  5. In the next pop-up, enter the following information:
    1. Client ID - The client ID that you noted in the Acquiring the Client ID & Secret section above.
    2. Client Secret - The client secret that you noted in the Acquiring the Client ID & Secret section above.
    3. Click the Continue button.
  6. In the next pop-up, click the Select a Site drop-down menu and select the applicable site.
  7. Back in the Customer Details page, you will see the new Malwarebytes integration.

Verifying your integration

  1. In the Blackpoint Portal, click the SNAP-Defense icon.
  2. In the Dashboard page, search for and click your customer.
  3. Click Collection in the left-hand menu and then on the Status tab at the top. In the Devices section, click the Package drop-down and select the Malwarebytes package.
    1. To view the full list of devices detected by Malwarebytes, click the menu icon in the top-left corner of the Devices section.
    2. Optionally, you can click Network in the left-hand menu which opens the full Device List. Click the inverted triangle icon to expand the filters. Then, expand the Collection Type heading to see the number of Malwarebytes devices being collected. Once you click Apply Filters, the diagram will adjust to show only devices collected by Malwarebytes.