Endpoint Standard: How Does Device Control Classify External Devices?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

How Does Endpoint Standard Classify External Devices? 

Environment

•    Endpoint Standard Web Console: November '20 Release (0.60) and Higher
•    Carbon Black Cloud Windows Sensor: 3.6.0.1897 and Higher
 

Resolution

The CBC sensor utilizes the OS to identify and classify the external device. Upon mount, the external device registers itself with the Windows OS to identify what type of device it is for proper interaction with the system. 

The CBC sensor utilizes this successful registration and translation of hardware and interface metadata to enforce the proper Device Control capabilities.