Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: JSON Format Reputation Mapping

Carbon Black Cloud: JSON Format Reputation Mapping

Environment

  • Carbon Black Cloud: All supported Backend versions

Question

What is the JSON Format Reputation Mapping in Carbon Black Cloud?

Answer

Company White (Approved List) = REP_COMPANY_WHITE
Company Black (Banned List) = REP_COMPANY_BLACK
Trusted White = REP_WHITE
Known Malware = REP_KNOWN_MALWARE
Suspect/Heuristic Malware = REP_SUSPECT_MALWARE / REP_HEURISTIC
Adware/PUP Malware = REP_ADWARE / REP_POTENTIALLY_UNWANTED_APP
Local White = REP_LOCAL_WHITE
Common White = REP_COMMON
Not Listed/Adaptive White = REP_NOT_LISTED
Unknown = REP_RESOLVING

Additional Notes

The JSON format reputation can be found in places like CBC connector logs.

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎10-15-2020
Views:
244
Contributors