Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

EDR Server: All Versions

Question

Is it possible to search for a PDF or Excel file by hash to find what endpoints the file is on using EDR?

Answer

No, PDF and Excel files are not tracked by EDR, and would not show in the console upon search.

Additional Notes

EDR will only collect binaries that execute; it does not collect scripts, batch files, or computer files that are created or modified.
App Control is the more suitable product to find files by hash.

Knowledge Base

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

Environment

Question

Answer

Additional Notes

Related Content

EDR

Knowledge Base

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

EDR: Is It Possible To Search For a PDF Or Excel File By Hash To Find What Endpoints The File Is On?

Environment

Question

Answer

Additional Notes

Related Content

EDR

Thank you for your feedback.

Thank you for your feedback.