Carbon Black EDR works with a variety of partners to provide threat intelligence feeds for the Carbon Black EDR server. You can add new partners and feeds to your server.

The Check for new feeds option on the Threat Intelligence Feeds page lets you check for the most recent feeds. It also removes feeds if they are no longer available. (However, existing reports and tagged processes/binaries will still identify these feeds.)


  1. On the navigation bar, click Threat Intelligence.
  2. Click the Action menu (down-arrow at the top of the page).
  3. Click Check for new feeds.
    If new feeds are available, they are added to the Threat Intelligence Feeds page.