Carbon Black Cloud

VMware Carbon Black Cloud is an enterprise-grade, cloud-native security platform that consolidates and modernizes an organization's security stack, delivering improved protection and streamlined operations across endpoints, workloads, and containers. It uses an architecture known as the "Predictive Security Cloud," which employs a single, lightweight sensor deployed across Windows, macOS, and Linux systems, as well as virtual and cloud workloads.

Unlike typical signature-based antiviral systems, Carbon Black Cloud's primary strength is unfiltered data collecting and streaming analytics. The agent continually logs complete, low-level endpoint activity (process creations, file modifications, network connections) and sends it to the cloud console. This technique enables the platform to detect and mitigate sophisticated, previously unknown threats, such as fileless and "Living-off-the-Land" (LotL) attacks that take advantage of legitimate system tools.