Is there a sandbox feature to execute binaries that have been observed in the environment?
Environment
Carbon Black EDR: All Versions
Resolution
No, there is no sandbox feature with the product. You do have the ability to download the binaries from the console or via API that be sent to a sandbox.