This section provides a system architecture overview for both Carbon Black Hosted EDR and Carbon Black EDR. In both systems, the server records events that are related to file changes. Copies of files and the data that changed are not recorded

Carbon Black Hosted EDR

This section illustrates the components of a Carbon Black Hosted EDR installation.

Carbon Black Hosted EDR Architecture

Components are:

  • Sensors that can be installed on various endpoints such as laptops, desktops, servers, and point of sale (POS) machines.

  • A cloud service that collects sensor data and makes it accessible with a web user interface or API.

  • The threat intelligence that includes the Carbon Black Threat Intel Reputation, Carbon Black App Control, and Carbon Black EDR threat indicators, and third-party attack classification using Threat Intel partner feeds.

If your company is also using Carbon Black App Control, you can integrate it with Carbon Black Hosted EDR. By leveraging Carbon Black App Control, you can contain advanced threats by globally blocking or banning them through Carbon Black App Control’s customizable prevention techniques in the midst of a response. See the Carbon Black EDR Integration Guide.

Carbon Black EDR

Carbon Black EDR server software is installed on a Linux server. The following diagram illustrates the components of a Carbon Black EDR installation.

Carbon Black EDR Architecture

Components are:

  • Sensors that can be installed on various endpoints such as laptops, desktops, servers, and point of sale (POS) machines.

  • A server that collects sensor data and makes it accessible with a web user interface or an API.

  • The threat intelligence that includes the Carbon Black Threat Intel Reputation, Carbon Black App Control, and Carbon Black EDR threat indicators, and third-party attack classification using Carbon Black Threat Intel partner feeds.

If your company is also using Carbon Black App Control, you can integrate it with Carbon Black EDR. See the Carbon Black EDR Integration Guide. With Carbon Black App Control, you can contain advanced threats by globally blocking or banning them through Carbon Black App Control’s customizable prevention techniques in the midst of a response.