Does Carbon Black Cloud have a PUA protection in block mode for Linux?

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Audit and Remediation
• Carbon Black Cloud Workload
• Carbon Black Cloud Prevention
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

PUA (potentially unwanted application) protection feature is part of Microsoft Defender on Window OS, but does the same protection exist for Linux natively in the CBC Linux sensor?

Environment

• Carbon Black Cloud Console: Current Version
• Carbon Black Cloud Linux Sensor: All Versions
• Linux OS: All Supported Versions

Resolution

CBC Linux sensor does NOT have an equivalent PUA (potentially unwanted application) protection feature; however, the Prevention Rule capabilities for Linux Sensors are documented in the User Guide.