What is Carbon Black Protection?
Cb Protection is a comprehensive security solution designed to safeguard critical systems and fixed-function devices in highly regulated environments. Leveraging a 'Default Deny' approach, the platform consolidates agents to effectively control changes, reduce attack surfaces, and minimize downtime. Cb Protection combines application control, file integrity monitoring, device control, and memory protection in a single agent, providing a robust defense against a wide range of threats, including malware, non-malware attacks, and advanced techniques like obfuscated malware, memory-based attacks, and script-based exploits. The solution also offers specialized protection against Powershell-based attacks through its Powershell Protection Rapid Config feature
Highlights
- Application control to automate approval of trusted software and eliminate the burden of whitelist management
- File integrity monitoring to prevent unwanted changes to critical applications and files
- Device control to restrict access to specific hardware peripherals
- Memory protection to defend against memory-based attacks and script-based techniques
- Powershell Protection Rapid Config to safeguard against Powershell-based attacks
Features
Application whitelisting