Submit Unknown Binaries for Cloud Analysis

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Allow unknown binaries to be submitted for cloud analysis

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: 3.2 and Higher
• Microsoft Windows: All Supported Versions

Resolution

1. Sign in to the Carbon Black Cloud console
2. Go to Enforce > Policies
3. Select the desired policy to enable cloud binary analysis
4. Under the "Sensor" tab, select the checkbox for Submit unknown binaries for analysis
5. Confirm to opt in
6. Click Save

Additional Information

Enabling this option will mean that data is shared with Carbon Black and a third party for analysis