At the time of investigation it is imperative that administrators are able to operate with confidence knowing what data they will be able to access. Adversaries can perform tasks which look benign but under the hood, they can run malicious commands using trusted applications such as PowerShell. With industry leading data assurance administrators can analyze and determine the best approach to wholistic remediation with Carbon Black.