Summary As one of the largest and most valued distributors of consumer goods to convenience stores throughout North America, Core-Mark International is very invested in having a strong security posture. Director of Network Systems Ken Merrigan and his team chose Carbon Black to meet various security needs within the organization and have found the visibility and control into their environment unmatched. Expanding Their Security Footprint Several years ago when high profile company breaches became increasingly news-worthy, Core-Mark received a mandate from their executives to increase the security footprint of the organization. With the very basic antivirus product that they had, the security team set out to upgrade to a solution that would provide them both visibility and protection. “We didn’t have that comprehensive protection that traditional antivirus doesn’t give,” said Julian Alexander, Network Analyst. “We needed visibility into our environment that we didn’t have in the past.”
After evaluating several vendors they found Carbon Black’s products best met the needs of the security team and the organization. Gaining Control Over Their Environment After deploying both CB Protection and CB Response, Core-Mark International gained both the insight into their environment and the application whitelisting capabilities they had been looking for. “By having chosen Carbon Black we now have visibility, awareness and control over our environment,” said Alexander. “When we looked into the Carbon Black technology we wanted the change control approach which Carbon Black definitely had. We looked at other vendors in the space and Carbon Black was definitely the best choice.” Conclusion As strong believers in the whitelisting approach to security for their critical systems the team has found Carbon Black continues to prevent unwanted files from running and gives them the insight they need into what is happening on their endpoints.
“Carbon Black has a wide variety of products that could fit the need of almost any company,” concludes Merrigan.

Summary Philips Lighting, N.V. is a global market leader with 34,000 employees in over 70 countries, recognized for their expertise in the development, manufacturing and application of innovative (LED) lighting solutions. A key objective of their security strategy was to be able to quickly adapt and stay ahead of the evolving threat landscape. After Carl Erickson, Chief Information Security Officer at Philips Lighting, launched the organization’s first Security Operations Center, SOC, his mission was to get to “world-class response capability.” That meant finding and deploying a solution providing complete visibility to empower his team and company to conduct business safely. Scalable Real-Time EDR Philips Lighting extensively examined a number of leading endpoint security solutions against a wide range of attacks. Cb Response, Carbon Black’s industry-leading solution for high-speed security teams, was the only product they found that gave their SOC a custom level of control over threat intel sources and was able to support their increasingly mobile user base via a Cloud-based implementation.
“Carbon Black is essentially our Swiss army knife. We can do a lot of different things with a lot of information,” says Erickson “The overall coverage and overall response times were greatly improved from what we had before. For us it was a no brainer.” Faster Detection Since deploying Cb Response in 2016, Philips Lighting has been able to quickly detect advanced threats and close security gaps. Company-wide indicator sweeps, which took weeks to reach 75% completion with a previous solution, are now able to be completed in a fraction of the time. Conclusion Leveraging the unfiltered data collection by Cb Response, the Threat Hunting team can perform rapid queries on live and historic endpoint data to identify new, suspicious activity, thereby eliminating the need to acquire a separate hunting sandbox. Overall, the SOC’s ability to quickly determine if an emerging threat is present in the environment allows for quicker decision-making by Security leadership.