VMware Carbon Black CB ThreatHunter
Advanced Threat Hunting & Incident Response in the Cloud

Features and Benefits:

Capabilities:

Complete Endpoint Protection Platform

Built on the CB Predictive Security Cloud, CB ThreatHunter provides advanced threat hunting and incident response functionality from the same agent and console as our NGAV, EDR and real-time query solutions, allowing your team to consolidate multiple point products with a converged platform.

Continuous & Centralized Recording

Centralized access to unfiltered endpoint data means that security professionals have all the information they need to hunt threats in real time as well as conduct in-depth investigations after a breach has occurred.

Attack Chain Visualization & Search

CB ThreatHunter provides intuitive attack chain visualization to make identifying root cause fast and easy. Analysts can quickly jump through each stage of an attack to gain insight into the attacker’s behavior, close security gaps, and learn from every new attack technique to avoid falling victim to the same attack twice.

Live Response for Remote Remediation

With Live Response, incident responders can create a secure connection to infected hosts to pull or push files, kill processes, perform memory dumps and quickly remediate from anywhere in the world.

Automation via Integrations & Open APIs

Carbon Black boasts a robust partner ecosystem and open platform that allows security teams to integrate products like CB ThreatHunter into their existing security stack.

Use Cases:

• Threat hunting
• Incident response
• Alert validation and triage
• Root cause analysis
• Forensic investigations
• Host isolation
• Remote remediation

Platforms:

Sensor Support:

• Windows

Documentation:

Download the VMware Carbon Black CB ThreatHunter Datasheet (.PDF)