Carbon Black Cloud: What is a Background Scan?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What is a Background Scan?

Environment

• Endpoint Standard: All Versions
• 'Run background scan' turned on for Policy (Enforce > Policies)

Resolution

Normally, the reputation/hash for executable files is determined at the time of execution. With a background scan, an initial reputation for pre-existing files can be populated before access. TheCarbon Black Cloud sensor will start a single-run background scan roughly one hour after initial install.