What configurations can help handle ransomware attacks?

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black EDR (formerly Cb Response)
• Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

What are the recommended configurations to help prevent / find ransomware attacks?

Environment

• Carbon Black Cloud: All Supported Versions
• App Control: All Supported Versions
• EDR: All Supported Versions

Resolution

General ransomware advice can be found on our Threat Research site.