All Products: Does Carbon Black Support assist in Incident Response?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Can Carbon Black Support help when performing incident response investigations?

Environment

• All Products: All Supported Versions
  • Carbon Black Cloud
  • App Control
  • EDR

Resolution

• No, incident response investigation is not available through Carbon Black
• Carbon Black has many partners that can be contacted if in need of IR assistance: https://www.vmware.com/partners/work-with-partners/incident-response-and-managed-security-service-providers.html
• Users can also post to the Threat Research space to discuss incidents with other UEX users

Additional Information

• Support may assist in determining if the tool failed to identify or block an issue, but will not assist in finding and removing attacks
• How to locate an IR partner