This section provides answers to the frequently asked questions about the Carbon Black Managed Detection and Response reporting process.
- What is in a monthly report?
-
After Carbon Black Cloud sensors are deployed in your network and at least one alert at priority 5+ is generated, monthly reports are sent to the email addresses you have configured in the Carbon Black Cloud console. These emails include information as it pertains to your organization, such as:
- Most common suspicious events
- Daily alerts
- Threat scores breakdown
- Top targeted endpoints
- Top suspect applications by name
- Active sensors by type
- Market segment comparison
- Most common OS versions
- Top targeted users
- Most widespread usernames
- New alerts
- New suspicious applications
For a sample monthly report see: Monthly Report.
- Can I get a custom report?
-
Carbon Black Managed Detection and Response does not provide custom reports for an organization. Carbon Black Managed Detection and Response provides curated content in the monthly report email, called Threat Intel Notifications. These Threat Intel Notifications contain:
- Analyst curated reports based on observed attacks and techniques.
- Customer notifications for major campaigns.
- Early warnings provided by third party public and private threat intelligence organizations.
- Tailored policy changes in accordance with new threats and techniques prior to public awareness.
