Endpoint Standard: What Happens when a Background Scan Detects a Hash with a Malicious Reputation?

[#1]

Environment

• Carbon Black Cloud Console: All Versions
• Carbon Black Cloud Sensor: All Versions

Question

What happens when a background scan detects a hash with a malicious reputation?

Answer

An alert and event will be created within the CBC Console.

Additional Notes

• No action is taken against the malware unless it executes. The sensor only reacts upon process execution.
• If an administrator requires the malware to be removed then manual action will need to be taken to remove it via the Investigate page or Malware Removal page.
• Company-Banned files are treated the same way as Known Malware in this article's context.

Related Content

Endpoint Standard: What Reputation Should a Hash Have to be Included on the Malware Removal Page?
CB Defense: How to Remove Known Malware Using the Malware Removal Page
Endpoint Standard: Why was a file drop for Known Malware not blocked?
Carbon Black Cloud: What is a Background Scan?
CB Defense User Guide