Evaluation Questions

This section provides answers to the frequently asked questions about the Carbon Black Managed Detection and Response evaluation process.

Can I evaluate Carbon Black Managed Detection and Carbon Black Managed Detection and Response before purchasing?

You can evaluate the Carbon Black Managed Detection product for two weeks before purchasing. During this time, you can perform penetration tests safely, on non-production systems in your environment, to experience all that Carbon Black Managed Detection has to offer.

To evaluate Carbon Black Managed Detection and Response, you must have Carbon Black Cloud Endpoint Standard or Carbon Black Cloud Workload advanced.

For more information, and to evaluate Carbon Black Managed Detection and Response, speak to your sales representative.

   

What does a Carbon Black Managed Detection and Response POC consist of?

When conducting a POC, you have Carbon Black Managed Detection and Response provisioned in your Carbon Black Cloud environment for a period of two weeks.

After a POC is started and you are properly provisioned, the Carbon Black Managed Detection and Response POC team alerts the Sales Engineer (SE) or Customer Service Manager (CSM) requestor that the POC is underway. The SE or CSM informs you of the start of the POC and outlines how to allow Carbon Black Managed Detection and Response actions.

For further information about configuring allowed actions and other settings, see: How to configure Managed Detected and Response.

During the POC, Carbon Black Managed Detection analysts review alerts with severity level 5-10. If the analysts receive a true or likely positive alert, the analysts email the customer. For Carbon Black Managed Detection and Response customers only, the analysts perform any response actions that the customer activates for the endpoint's policy.

Carbon Black Managed Detection and Response recommends that you test during the two-week trial period to help to generate true or likely positive alerts. If you need assistance to generate true positive alerts, please contact your sales team so that they can coordinate with the Carbon Black Managed Detection and Response team to perform simulated testing on your behalf. You can view the tests performed by Carbon Black Managed Detection and Response in the Carbon Black Cloud console.