What are Canary Files?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

What are canary files?

Environment

• Carbon Black Cloud Sensor: All Supported Versions 

Resolution

Canary files are used as part of ransomware prevention. They are .pptx, .doc, .jpg, and .xls files found in various locations throughout the system drive after installing Carbon Black Cloud Sensor.