Enterprise EDR: How to enable binary uploads

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Enable Unified Binary Store (UBS) uploads

Environment

• Enterprise EDR Console: All Versions

Resolution

1. Click Enforce and click Policies.
2. At the top of the page, slide the switch for Upload all new binaries to CB for later analysis and download to ON. This selection is global for the environment.
3. To view binary metadata, go to a process of interest via an alert or the Investigate page. Metadata that is associated with the process displays to the right of the Process Tree.
4. Click the link next to Publisher to go to the associated Binary Details page.