As the advanced research and development hub with 20,000 researchers across the globe, Samsung Research America is very focused on having the strongest possible security posture. After replacing traditional antivirus (AV) with Carbon Black’s next-generation AV solution, Cb Defense, Samsung has been able to stop attacks and gain visibility into their environment. Eliminating Traditional Antivirus When CISO Steven Lentz joined Samsung Research America, he knew traditional antivirus wasn’t enough for the organization. He then began an in-depth evaluation process where he and the team assess a number of endpoint security and antivirus solutions.
“In our evaluation, we had a vendor create some advanced malware samples that we tested against Microsoft SCEP and Malwarebytes,” says Steven Lentz. “Both AV solutions missed almost all of the attacks and Cb Defense stopped 100%.” Additionally, Lentz notes, “The ransomware threatscape will continue to evolve and Cb Defense is exactly what enterprises need to maintain business continuity in the face of today’s biggest cyber threats. With Cb Defense we are able to quickly investigate, respond, and remove our outdated AV solutions from our environment.”
Building a Robust Security Stack Improved prevention wasn’t the only benefit that Lentz and his team saw when they deployed Cb Defense. Samsung Research America already had a few tools in their security stack, and being able to integrate those products with Carbon Black was a major priority. Due to Carbon Black’s open APIs and robust
Integration Network, Samsung was able to quickly integrate tools together to gain greater visibility and increase efficiency. “Tools need to work together. They need to be able to integrate and talk because that allows us to move faster,” Lentz notes. Conclusion Since deploying Carbon Black, Samsung Research America has been able to stop attacks and has gained better visibility into their environment.
“Traditional antivirus solutions regularly miss attacks that Cb Defense catches,” Lentz concludes.

Summary As one of the largest and most valued distributors of consumer goods to convenience stores throughout North America, Core-Mark International is very invested in having a strong security posture. Director of Network Systems Ken Merrigan and his team chose Carbon Black to meet various security needs within the organization and have found the visibility and control into their environment unmatched. Expanding Their Security Footprint Several years ago when high profile company breaches became increasingly news-worthy, Core-Mark received a mandate from their executives to increase the security footprint of the organization. With the very basic antivirus product that they had, the security team set out to upgrade to a solution that would provide them both visibility and protection. “We didn’t have that comprehensive protection that traditional antivirus doesn’t give,” said Julian Alexander, Network Analyst. “We needed visibility into our environment that we didn’t have in the past.”
After evaluating several vendors they found Carbon Black’s products best met the needs of the security team and the organization. Gaining Control Over Their Environment After deploying both CB Protection and CB Response, Core-Mark International gained both the insight into their environment and the application whitelisting capabilities they had been looking for. “By having chosen Carbon Black we now have visibility, awareness and control over our environment,” said Alexander. “When we looked into the Carbon Black technology we wanted the change control approach which Carbon Black definitely had. We looked at other vendors in the space and Carbon Black was definitely the best choice.” Conclusion As strong believers in the whitelisting approach to security for their critical systems the team has found Carbon Black continues to prevent unwanted files from running and gives them the insight they need into what is happening on their endpoints.
“Carbon Black has a wide variety of products that could fit the need of almost any company,” concludes Merrigan.

Summary Philips Lighting, N.V. is a global market leader with 34,000 employees in over 70 countries, recognized for their expertise in the development, manufacturing and application of innovative (LED) lighting solutions. A key objective of their security strategy was to be able to quickly adapt and stay ahead of the evolving threat landscape. After Carl Erickson, Chief Information Security Officer at Philips Lighting, launched the organization’s first Security Operations Center, SOC, his mission was to get to “world-class response capability.” That meant finding and deploying a solution providing complete visibility to empower his team and company to conduct business safely. Scalable Real-Time EDR Philips Lighting extensively examined a number of leading endpoint security solutions against a wide range of attacks. Cb Response, Carbon Black’s industry-leading solution for high-speed security teams, was the only product they found that gave their SOC a custom level of control over threat intel sources and was able to support their increasingly mobile user base via a Cloud-based implementation.
“Carbon Black is essentially our Swiss army knife. We can do a lot of different things with a lot of information,” says Erickson “The overall coverage and overall response times were greatly improved from what we had before. For us it was a no brainer.” Faster Detection Since deploying Cb Response in 2016, Philips Lighting has been able to quickly detect advanced threats and close security gaps. Company-wide indicator sweeps, which took weeks to reach 75% completion with a previous solution, are now able to be completed in a fraction of the time. Conclusion Leveraging the unfiltered data collection by Cb Response, the Threat Hunting team can perform rapid queries on live and historic endpoint data to identify new, suspicious activity, thereby eliminating the need to acquire a separate hunting sandbox. Overall, the SOC’s ability to quickly determine if an emerging threat is present in the environment allows for quicker decision-making by Security leadership.

Summary
As a large provider of high quality single-family rental homes in the United States, Progress Residential has leveraged the power of a single platform with Carbon Black’s Predictive Security Cloud (PSC). Tasked with the job of investing in cybersecurity, the Progress Residential team sought out a nextgeneration antivirus (NGAV) solution that would change the way they manage security, and found it with Carbon Black. Seeking Sophisticated Prevention Before making the switch to Carbon Black, Progress Residential needed to replace their traditional AV solution, Trend Micro, as it was no longer a viable solution for the anticipated growth of the company. Progress Residential leadership was looking to make an investment in cybersecurity, and wanted to find an innovative security vendor and solution that would prevent sophisticated attacks, and provide context and visibility into their environment. The Progress Residential team began research looking at endpoint protection platforms CrowdStrike and Endgame, and with the help of partner CompuNet and industry peers, Carbon Black was brought into the conversation. Before even approaching the Carbon Black team, Cody Lavallee, IT Infrastructure Manager at Progress Residential, conducted his own research on Carbon Black and found the company’s vision compelling. The Advantage of a Single Platform With Carbon Black, Progress Residential can take advantage of the PSC platform to save significant time for their SOC team. As Lavallee shared, “I now have the ability for a 24/7 SOC to immediately identify and take action on any issues that come up without needing to reach out to my team at all hours of the day/night.” There are also operational benefits from using Carbon Black. Their previous solution lacked response capabilities, and remediation often required a prolonged process. Carbon Black, on the other hand, allows them to solve fundamental problems quickly by leveraging platform functionality such as real-time endpoint query through CB LiveOps. “CB LiveOps was a game changer,” said Lavallee “it enables us to tell the technology what we need and get the information back.” The team also found the visibility available through Carbon Black’s expert threat reports extremely valuable, especially in their onboarding process.These CB ThreatSight reports demonstrated Carbon Black’s ability to improve their security posture to the Progress Residential executive team. The products on the PSC platform have consolidated Progress Residential’s security stack, providing exactly what the executive team required of a security vendor. More specifically, the new addition of the threat hunting and incident response solution CB ThreatHunter. The unfiltered visibility via CB ThreatHunter provides actionable versus anomalous activity for their SOC team. “We wanted to stay on the cutting-edge of cybersecurity and CB
ThreatHunter provided us with additional security resources to do that” says Lavallee. Conclusion With the power of a single platform, Progress Residential has been able to improve their security posture and redefine security management for the company. The competition could not compete with the wealth of the products on the PSC, and neither will the adversaries.