Carbon Black Cloud: What Does the Heuristic File Reputation Mean?
search cancel

Carbon Black Cloud: What Does the Heuristic File Reputation Mean?

book

Article ID: 290173

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What does the Heuristic reputation mean?

Environment

  • Carbon Black Cloud Console: All Versions
  • Carbon Black Cloud Sensor: All Supported Versions

Resolution

  • Heuristic reputation is applied when a file is suspected to be malicious based on a set of attributes, but analysis cannot definitively determine whether the file is malware.
  • It generally indicates a level of confidence above Suspect Malware, but below Known Malware reputation.

Additional Information

  • When it comes to Policy enforcement, processes with Heuristic reputation are subject to the same Prevention rules as Suspect Malware.
  • As Carbon Black Cloud employs a variety of analysis techniques, file reputations can change over time with further analysis.
  • Other reputation that can be assigned to suspicious files include PUP, Adware, and Suspect Malware.