CB Response: Can Carbon Black work directly with Feed vendors in regards to correcting false positive results?
book
Article ID: 287774
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Can Carbon Black directly request threat reports that alert on valid processes or binaries be corrected from third party Vendors of those Feeds?
Environment
- CB Response Server: All Versions
- CB Response Console: All Versions
Resolution
No, Carbon Black is not able to directly control what is provided in feeds hosted by third party vendors.
Feedback
thumb_up
Yes
thumb_down
No