Tool
tool:carbon_black
Endpoint monitoring and analysis tool deployed by the incident-response team across the retail environment.
Endpoint monitoring and analysis tool deployed by the incident-response team across the retail environment.
“The tool that we use primarily is Carbon Black”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Windows XP | Explicit | 15 |
| incoming | USES | Kroll | Explicit | 15 |
Kroll USES Carbon Black
Kroll’s incident-response team primarily used Carbon Black for endpoint monitoring and analysis across the environment.
Explicit Confidence 99% · Matt Bromiley EP 15 Details
“The tool that we use primarily is Carbon Black which is an end-point monitoring tool”
Carbon Black AFFECTS Windows XP
Carbon Black was deployed broadly to systems running Windows XP and above that could support its agent.
Explicit Confidence 90% · Matt Bromiley EP 15 Details
“everything Windows XP and above”