VMware Carbon Black EDR (formerly Cb Response)

VMware Carbon Black EDR (formerly Cb Response) Reviews

Do you work for this company? Learn how we help vendors

Ratings and Reviews
(1-1 of 3)

Companies can't remove reviews or game the system. Here's why
Score 8 out of 10
Vetted Review
Verified User
Review Source
Cb Response is used to investigate an endpoint. Investigate is a broad term and CarbonBlack allows us to perform numerous types of investigations. These range from finding out what happened on an endpoint, where, when, and how. This is not only used for tracking down suspicious or malicious behavior but also for human resources/legal use cases. What was a person doing during their day, what did they browse to (ability to pull the internet history files), what programs are they running, etc. This tool is also used to isolate/quarantine a host from the rest of the network so that it can be investigated safely. CB Response has numerous threat feeds out of the box and also allows you to input your own threat intelligence to build watchlists and alerts for analysts to investigate. Overall this is a great tool and is used everyday.
  • Process tree view of endpoint activity
  • Ability to pull files from host
  • Threat Intelligence integration
  • Isolate a host
  • Needs more defensive abilities
Investigating suspicious behavior on an endpoint, ability to kill processes and run files on the host. Ability to view every change made on a system in a timeline format. Ability to search across the enterprise for indicators of compromise. Ability to pull files from the host for further analysis. Ability to safely communicate with an endpoint by isolating it from the rest of the network

VMware Carbon Black EDR (formerly Cb Response) Scorecard Summary

Feature Scorecard Summary

Incident Response Platforms (6)
80%
8.0
Company-wide Incident Reporting (1)
80%
8.0
Integration with Other Security Systems (1)
80%
8.0
Attack Chain Visualization (1)
100%
10.0
Centralized Dashboard (1)
100%
10.0
Machine Learning to Prevent Incidents (1)
30%
3.0
Live Response for Rapid Remediation (1)
90%
9.0

What is VMware Carbon Black EDR (formerly Cb Response)?

Carbon Black EDR (formerly Cb Response) is an incident response and threat hunting solution designed for security operations center (SOC) teams with offline environments or on-premises requirements. Carbon Black EDR records and stores endpoint activity data so that security professionals can hunt threats in real time and visualize the complete attack kill chain. It leverages the VMware Carbon Black Cloud’s aggregated threat intelligence, which is applied to the endpoint activity system of record for evidence and detection of these identified threats and patterns of behavior.

VMware acquired Carbon Black October 2019.

VMware Carbon Black EDR (formerly Cb Response) Video

Carbon Black Enterprise Response solution overview

VMware Carbon Black EDR (formerly Cb Response) Downloadables

VMware Carbon Black EDR (formerly Cb Response) Integrations

  • Infoblox

VMware Carbon Black EDR (formerly Cb Response) Competitors

VMware Carbon Black EDR (formerly Cb Response) Pricing

VMware Carbon Black EDR (formerly Cb Response) Technical Details

Operating SystemsUnspecified
Mobile ApplicationNo
Supported LanguagesEnglish

Frequently Asked Questions

What is VMware Carbon Black EDR (formerly Cb Response)?

Carbon Black EDR (formerly Cb Response) is an incident response and threat hunting solution designed for security operations center (SOC) teams with offline environments or on-premises requirements. Carbon Black EDR records and stores endpoint activity data so that security professionals can hunt threats in real time and visualize the complete attack kill chain. It leverages the VMware Carbon Black Cloud’s aggregated threat intelligence, which is applied to the endpoint activity system of record for evidence and detection of these identified threats and patterns of behavior. VMware acquired Carbon Black October 2019.

Who uses VMware Carbon Black EDR (formerly Cb Response)?

The most common users of VMware Carbon Black EDR (formerly Cb Response) are from Mid-size Companies and the Entertainment industry.