CB Defense: What Is The Difference Between Deny Operation and Terminate Process

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What are the differences between the policy actions for Deny Operation and Terminate Process?

Environment

• CB Defense Web Console: All Versions

Resolution

• Deny Operation will only prevent the listed process from performing specific actions.
• Terminate Process will kill the process immediately if it is found to be running.

Additional Information

It always depends on the specific application and operation you're referring to on what you should use.  We cannot recommend one over the other for you since it depends on the event but hopefully the above information will help in your decision.