Creating Custom Detection Rules with VMware Carbon Black Cloud
In security there are things we know to be malicious, in these cases we want to take uniform action swiftly to reduce overall exposure. But, security has anomalies. Every organization operates in a different manner and being able to easily create custom detections rules is fundamental in assisting the SOC. The principal that Carbon Black delivers on is that flexibility leads to more future-ready security practices. By deploying Zero-Touch detections based on the evolving threat landscape to protect your organization while also empowering teams to alert on custom IOCs we are able to drive higher fidelity alerts. [2:40 mins]