Does EDR have BPFDoor Malware Detection?

Products

• Carbon Black EDR

Issue/Introduction

Does EDR have a feed that covers BPFDoor malware?

Environment

• Carbon Black EDR: All Versions

Resolution

CBKnownIOC feed has a "BPFDoor IOCs" report that can be utilized to alert on this malware variant. 

1. Log into the EDR console.
2. Click the Threat Intel page.
3. Enable the CBKnownIOC feed.