What is a Background Scan?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What is a Background Scan and what does it do?

Environment

• Carbon Black Cloud Endpoint Standard: All Versions
• Carbon Black Cloud Sensor: Supported Versions
• Microsoft Windows OS: All Supported Versions
• Linux OS: All Supported Versions
• MacOS: All Supported Versions
• 'Run background scan' turned on for Policy (Enforce > Policies)

Resolution

Normally, the reputation/hash for executable files is determined at the time of execution. With a background scan, an initial reputation for pre-existing files can be populated before access. The Carbon Black Cloud sensor will start a single-run background scan roughly one hour after initial install.