CB Response: Why hasn't the 'CBKnownIOCs' feed been updated recently?
book
Article ID: 289035
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Why is the 'CBKnownIOCs' feed no longer being updated?
Environment
CB Response Server: All Versions
CBKnownIOCs Threat Feed
Resolution
Carbon Black has made internal improvements to how the Threat Analysis Unit can directly influence hash reputation and have decided to remove hash based IOC’s from the CbKnownIOC’s. Instead, all future hash reputation updates will be delivered through the Cb Reputation Threat feed.