Carbon Black Cloud: Can a User Access a File That has not been Scanned by Background Scan?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

On the device, can a user access a file that has not yet been scanned when Background Scan is currently running?

Environment

• Endpoint Standard: All Versions
• Microsoft Windows: All Supported Versions
• Apple macOS: All Supported Versions

Resolution

Yes. When a file is accessed, the Sensor hashes the file and sends a request to the Predictive Security Cloud (PSC) to obtain its reputation.