To search for binaries across the Carbon Black EDR Unified View, click Binary Search on the left navigation bar.
In the multi-cluster context for binary search, if a particular binary occurs on multiple clusters, it appears multiple times in the search results.
Click the binary in the search results to display the Binary Details page.
Binary Details
In Carbon Black EDR Unified View, the Binary Details page displays aggregated information about the binary from across all clusters. Similarly, links on the Binary Details page perform Carbon Black EDR Unified View-wide searches across clusters.
In some cases, Carbon Black EDR clusters return conflicting Digital Signature Metadata status for a particular binary. This can happen because signature status is verified on the sensor level, and different environments (clusters) can have different certificate trust settings. When such a conflict occurs, you can see which cluster reported a particular status by clicking the signature status.
