Carbon Black Cloud: What are Canary Files?

[#1]

Environment

• Carbon Black Cloud (Formerly CB Defense) Sensor: 3.0 and Higher

Question

What are canary files?

Answer

Canary files are used as part of ransonmware prevention. They are .pptx, .doc, .jpg, and .xls files found in various locations throughout the system drive after installing Carbon Black Cloud Sensor version 3.x+

Related Content

Carbon Black Cloud: Why Aren't Decoy/Canary Files Hidden?