Environment
- Carbon Black Cloud: All supported Backend versions
Question
What is the JSON Format Reputation Mapping in Carbon Black Cloud?
Answer
Company White (Approved List) = REP_COMPANY_WHITE
Company Black (Banned List) = REP_COMPANY_BLACK
Trusted White = REP_WHITE
Known Malware = REP_KNOWN_MALWARE
Suspect/Heuristic Malware = REP_SUSPECT_MALWARE / REP_HEURISTIC
Adware/PUP Malware = REP_ADWARE / REP_POTENTIALLY_UNWANTED_APP
Local White = REP_LOCAL_WHITE
Common White = REP_COMMON
Not Listed/Adaptive White = REP_NOT_LISTED
Unknown = REP_RESOLVING
Additional Notes
The JSON format reputation can be found in places like CBC connector logs.
