Carbon Black Cloud: How to receive advanced notifications and updates for upcoming deployments of new and updated detections and prevention, including Core Prevention Rule updates.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to sign up to receive advanced notifications and updates for upcoming deployments of new and updated detections and prevention.

Environment

• Carbon Black Cloud Server: All versions
• Carbon Black Cloud Sensors: All versions
• Carbon Black Cloud Sensor OS: All versions

Resolution

Carbon Black announces when a rule release will go out shortly before the onset of of the "push". The announcements are found here: Threat Research Docs

Additional Information

• Example announcement: January Upcoming Deployment
• One can subscribe to CB Intel Update to receive notifications and updates for upcoming deployments of new and updated detections and prevention here:How to Subscribe to Future Threat Research Notifications
• An In-Product Notification (IPN) is also sent out to all sites' CBC Consoles pointing to this upcoming event:
• For example:

January Endpoint Standard Rule Release
The latest detection and prevention updates from TAU (Threat Analyst Unit) will begin release to production environments in the next 24 hours. This release is a maintenance release, which includes updates to existing detections and preventions.