This section explains how to search for and analyze binary metadata. Binary Search CriteriaCarbon Black EDR sensors begin tracking binaries when they are executed by a process. You can perform a binary search to explore the metadata of a binary. High-level Binary Search Result SummariesWhen you click Search , the Binary Search page updates the results data with information that is specific to your search criteria. The results are displayed in a variety of formats that allow you to quickly find suspicious binaries. Binary Search Results TableAt the bottom of the page (to the right of Related Metadata), the Binary Search Results table appears. Each row provides details about binary metadata that matches the search criteria. Binary PreviewAt the top of the Binary Preview page, the hashes of the binary (MD5 and, if available, SHA-256) appear. The file name(s) that the binary has used are listed beneath the hash value (if available). Binary AnalysisUse the Binary Analysis page to thoroughly investigate a binary.
