Submit False Positive and False Negative results.

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Submit False Positive and False Negative results. 

Environment

• Carbon Black Cloud Console: All supported versions
• App Control: All supported versions
• EDR: All supported versions

Resolution

If you believe the reputation returned within a Carbon Black Product is incorrect (Marked as malware that isn't or malware that wasn't identified as malware), please visit ESG Sample Submission portal and follow the instructions for submitting a hash or file for Carbon Black. 

Additional Information

• Carbon Black has multiple methods for ingesting files, and leverages a number of internal and external data sources to generate reputation.
• While a single source of information may be valuable, it does not always mean all sources will see the same file as malicious.
• Additional information for using SymSubmit can be found here.