CB Defense: How are Reputations Assigned?

CB Defense: How are Reputations Assigned?

Environment

  • CB Defense PSC Console: All Versions
  • CB Defense Sensor: All Versions
  • Microsoft Windows: All Supported Versions
  • Apple MacOS: All Supported Versions

Question

How are Reputations Assigned for files?

Answer

Reputation assignment depends on the type of file (Pre-Existing, New, Network), CB Defense Configuration (Background Scan, Local Scanner Configuration, Delay Execute for Cloud Scan, Scan Files on Network Drives, Scan Execute on Network Drives), where the file is at in the execution process (No Execute, Pre-Execute, Post-Execute) and the CB Defense: Reputation Priority. For more details, see the following articles:

CB Defense: How Are Reputations Assigned for Pre-Existing Files?
CB Defense: How Are Reputations Assigned for New Files?
CB Defense: How Are Reputations Assigned for Network Files?
 

Additional Notes

  • Pre-Existing Files: Files that existed on the device prior to the sensor being installed
  • New Files: Files that are created or downloaded on the device after the sensor is installed
  • Network Files: Files that exist on network drives
  • No Execute: Pre-existing files which never executed or new files that were dropped or created on the hard disk but never executed
  • Pre-Execute: Pre-execute refers to the first time that a file is attempting to execute
  • Post-Execute: Post-execute refers to files which are already running or which have run before
  • Definite Reputation: Anything other than NOT_LISTED or UNKNOWN

Related Content


Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎03-08-2018
Views:
1886
Contributors