All Products: Does Carbon Black Support assist in Incident Response?
book
Article ID: 286304
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Can Carbon Black Support help when performing incident response investigations?
Environment
All Products: All Supported Versions
Carbon Black Cloud
App Control
EDR
Resolution
No, incident response investigation is not available through Carbon Black
Carbon Black has many partners that can be contacted if in need of IR assistance: https://www.vmware.com/partners/work-with-partners/incident-response-and-managed-security-service-providers.html
Users can also post to the Threat Research space to discuss incidents with other UEX users
Additional Information
Support may assist in determining if the tool failed to identify or block an issue, but will not assist in finding and removing attacks