Broadcom (VMware Carbon Black)

VMware Carbon Black EDR (formerly CB Response) is an advanced endpoint detection and response solution that provides continuous recording of endpoint activity, enabling real-time threat detection and complete attack chain visualization. It captures and indexes all process executions, file modifications, registry changes, and network connections for retrospective threat hunting.

For security response actions, Carbon Black EDR supports blocking of malicious file hashes across the entire endpoint fleet, immediately preventing known malicious binaries from executing on any managed system. This hash-based blocking capability is critical during incident response for preventing reinfection and stopping the spread of identified malware across the organization.

Supported Response Actions:

• Block File Hash
• Unblock File Hash