All Products: Does Carbon Black Support assist in Incident Response?

[#1]

Environment

• All Products: All Supported Versions
  • Carbon Black Cloud
  • App Control
  • EDR

Question

Can Carbon Black Support help when performing incident response investigations?

Answer

• No, incident response investigation is not available through Carbon Black
• Carbon Black has many partners that can be contacted if in need of IR assistance: Incident Response and Managed Security Service Providers - VMware
• Users can also post to the Threat Research space to discuss incidents with other UEX users

Additional Notes

• Support may assist in determining if the tool failed to identify or block an issue, but will not assist in finding and removing attacks
• How to locate an IR partner