VMware Carbon Black Cloud Reviews

I use the solution for any endpoint in a system, such as a host. The EDR can detect any malicious activity, such as malware, anomalous behavior, or any other possibility of a threat.

VMware Carbon Black Cloud is a user-friendly solution that can isolate machines from the rest of the network. When a machine is quarantined, it cannot communicate with any other machines on the network except for the Carbon Black Cloud server. This allows you to investigate the machine without the risk of malware escaping to the network.

Carbon Black Cloud's server can communicate with the quarantined machine through DNS and VSCP. This allows you to collect data from the machine, such as system logs, process activity, and registry changes. This data can be used to investigate the infection and determine the next steps.

CrowdStrike and Cybereason are also popular EDR solutions. They offer similar features to VMware Carbon Black Cloud but may have different strengths and weaknesses. It is important to evaluate all of your options before choosing an EDR solution.

Additionally, it is complex to use, and the pricing should be improved. 

Firstly, we use it as part of our Zero Trust networking solution as it acts as a mitigating response for any vulnerabilities with applications or the operating system. Secondly, we use it to track device compliance to check whether things are updated because it collects so much information about devices. Most importantly, we use it for peace of mind knowing that we have a flexible and robust solution for endpoint security.

The best feature is that it collects so much information. Its search functionality on the console works well as far as being able to drill down and find compliance issues. Also, something was executed on a machine or across a bunch of machines and how it relates to those bits of data. In that case, you can look at the whole picture in your environment.

I use the solution to do back-end architecture and management for a response. 

The solution is very inexpensive but still provides good process-level management. 

The solution does very well as a baseline EDR, especially between the endpoint and launching scripts or pulling data back. 

There is a back-end Python library for reporting.

Our primary usage for this solution is as an endpoint response. We use Carbon Black as a threat line of defense for the endpoints.

Carbon Black ensures the probability that any ransomware will be stopped before spreading. This is very important. The solution provides this for our business.

We use VMware Carbon Black Cloud for endpoint detection and response.

Threat hunting is the most valuable feature of VMware Carbon Black Cloud.

I use VMware Carbon Black Cloud for endpoint protection, serving as a defense against malware and viruses on client devices.

The most valuable features of VMware Carbon Black Cloud are its lightweight design, ensuring minimal impact on end-users, and its real-time protection.

We used Cb Response for hands-on computer incident response for our infrastructure, installing it on all of our servers and high-value workstations.

The enhanced logging and data analysis of the incident response and investigation components allowed us to quickly identify and resolve security issues before they could spread.

Cb Response’s root-cause analysis and anomaly detection gave us quick warnings and allowed us to start actively threat hunting, instead of taking a passive approach to security.

Our primary use case is to detect any abnormal activity happening on the endpoint. Carbon Black Response works like CCTV which monitors every activity and every single process running on the operating system. We use it on Windows, Linux, and Mac. Once there is an abnormal action, there is a notification that is sent to the administrator.

The administrator will open up the GUI, the console for the Carbon Black Response, and start doing his investigation to get to the root cause for the issue if there is one.

The most valuable feature is its ability to seek out abnormal activity and to create alerts.