Carbon Black Cloud: Are there detection reports generated after a background scan?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

After an endpoint is fully scanned by the background scanner, is there anywhere a report is generated within the console to review suspect and/or malicious detections?

Environment

• Endpoint Standard: All versions

Resolution

The results of background scans are available as events within the Investigate page, with Alerts generated if malicious files are found.

• To quickly find if a sensor has seen malware on a machine, search the Investigate page with the following query:

file_scan_result:*

Additional Information

There isn't anywhere within the console that will reflect the exact files scanned and their reputations, but the sensor will report any potentially malicious files found to the console.