Integrating with Malwarebytes

Introduction

Follow this article to integrate Blackpoint with Malwarebytes. The integration consists of three main steps:

1. Acquiring the Client ID & Secret
2. Adding the Integration in the Blackpoint Portal
3. Verifying your integration

Prerequisites

• You must have Administrator-level access in Malwarebytes.

Instructions

Acquiring the Client ID & Secret

1. Log into the Malwarebytes OneView platform.
2. On the left side menu, navigate to Settings > APIs & Services.
3. In the OAuth 2.0 Client IDs screen, click the plus (+) icon in the top-right corner.
4. In the Create OAuth Client ID pop-up window:
   1. Enter MWB API Client in the Application Name field.
   2. Click the Access drop-down menu and select the "read", "write", and "execute" checkboxes.
   3. Click the Submit button.
5. An OAuth Client pop-up window will appear showing the newly created client ID and client secret. Click the copy buttons next to each. Save or paste this information in a secure location for later use. Click OK.

Adding the Integration in the Blackpoint Portal

1. In the Blackpoint Portal, navigate to Customer in the left-hand menu.
2. In the Customer List section, find the customer you are setting up a Malwarebytes integration for. Click the Manage button. You will be redirected to the Customer Details page. 
3. In the Integrations tab, click the +Add button.
4. In the Add Integration pop-up, select Malwarebytes in the drop-down menu and click Next.
5. In the next pop-up, enter the following information:
   1. Client ID - The client ID that you noted in the Acquiring the Client ID & Secret section above.
   2. Client Secret - The client secret that you noted in the Acquiring the Client ID & Secret section above.
   3. Click the Continue button.
6. In the next pop-up, click the Select a Site drop-down menu and select the applicable site.
7. Back in the Customer Details page, you will see the new Malwarebytes integration.

Verifying your integration

1. In the Blackpoint Portal, click the SNAP-Defense icon.
2. In the Dashboard page, search for your customer and click the name to open it.
3. Click Collection in the left-hand menu and then on the Status tab at the top. In the Devices section, click the Package drop-down and select the Malwarebytes package.
   1. Optionally, you can click Network in the left-hand menu which opens the full Device List. Click the inverted triangle icon to expand the filters. Then, expand the Collection Type heading to see the number of Malwarebytes devices being collected. Once you click Apply Filters, the diagram will adjust to show only devices collected by Malwarebytes.