Carbon Black EDR
Carbon Black EDR is an incident response and threat hunting solution designed for security teams with offline environments or on-premises requirements. Carbon Black EDR continuously records and stores comprehensive endpoint activity data, so that security professionals can hunt threats in real time and visualize the complete attack kill chain. Top SOC teams, IR firms and MSSPs have adopted Carbon Black EDR as a core component of their detection and response capability stack. Carbon Black EDR is available via MSSP or directly via on-premises deployment, virtual private cloud or software as a service.How do you position yourself against your competitors?Carbon Black EDR benefits security teams by providing faster end-to-end response and remediation, accelerated IR and threat hunting with continuous endpoint visibility, rapid identification of attacker activities and root cause, remote access to infected endpoints for in-depth investigation, better protection from future attacks through automated hunting, and unlimited retention and scale for the largest installations. Key capabilities include out-of-the-box and customizable behavioral detection, multiple customizable threat intel feeds, automated watchlists, process and binary search of centralized data, interactive attack chain visualization, Live Response for rapid remediation and more. Carbon Black EDR leverages the VMware Carbon Black Cloud’s aggregated threat intelligence, which is applied to the endpoint activity system of record for evidence and detection of these identified threats and patterns of behavior. Customers that augment or replace legacy antivirus solutions with Carbon Black EDR do so because those legacy solutions lack visibility and context, leaving customers blind to attacks.
