What Happens when a Background Scan Detects a Hash with a Malicious Reputation?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What happens when a background scan detects a hash with a malicious reputation?

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Versions

Resolution

An alert and event will be created within the CBC Console.

Additional Information

• No action is taken against the malware unless it executes. The sensor only reacts upon process execution.
• If an administrator requires the malware to be removed then manual action will need to be taken to remove it via the Investigate page or Malware Removal page.
• Company-Banned files are treated the same way as Known Malware in this article's context.