- Using dashboards
- Managing alerts across Cylance Endpoint Security services
- Managing users, devices, and groups
- Manage CylancePROTECT Desktop and CylanceOPTICS devices
- Manage zones
- Manage devices with the CylancePROTECT Mobile app
- Manage CylancePROTECT Mobile app and CylanceGATEWAY users
- View CylanceAVERT user details
- Manage user groups
- Configure device lifecycle management
- View a list of applications installed on CylancePROTECT Desktop devices
- Remove a registered FIDO device for a user account
- Discover unprotected devices
- Managing threats detected by CylancePROTECT Desktop
- Managing threats detected by CylancePROTECT Mobile
- Managing safe and unsafe lists for CylancePROTECT Desktop and CylancePROTECT Mobile
- Add a file to the CylancePROTECT Desktop global quarantine or global safe list
- Add a file to the CylancePROTECT Desktop local quarantine or local safe list
- Add a certificate to the CylancePROTECT Desktop global safe list
- Add an app, certificate, IP address, domain, or installer source to the CylancePROTECT Mobile safe or restricted list
- Analyzing data collected by CylanceOPTICS
- Using CylanceOPTICS to detect and respond to events
- Monitoring network connections with CylanceGATEWAY
- Monitoring sensitive files with CylanceAVERT
- View mobile OS vulnerabilities
- Auditing administrator actions
- Managing logs
- Send events to a SIEM solution or syslog server
- Enable access to the Cylance User API
- Troubleshooting Cylance Endpoint Security
- Using the BlackBerry Support Collection Tool
- Using the Report a problem feature
- Removing the BlackBerry Connectivity Node software from Cylance Endpoint Security
- Troubleshooting CylancePROTECT Desktop
- Remove the CylancePROTECT Desktop agent from a device
- Re-register a Linux agent
- Troubleshoot update, status, and connectivity issues with CylancePROTECT Desktop
- A large number of DYLD Injection violations are reported by Linux devices
- Time zone variances for CylancePROTECT Desktop
- Folder exclusions when using CylancePROTECT Desktop with third-party security products
- Linux driver is not loaded. Upgrade the driver package.
- Troubleshooting CylanceOPTICS
- BlackBerry Docs
- Cylance Endpoint Security
- Administration
- Cylance Endpoint Security Administration Guide
- Managing alerts across Cylance Endpoint Security services
- View and manage aggregated alerts
- Use the AI-powered Cylance Assistant to investigate alerts
Use the AI-powered Cylance Assistant to investigate alerts
Cylance Assistant
to investigate alertsYou can use the AI-powered
Cylance Assistant
to provide a summary analysis of an alert group, and detailed analysis for process artifacts within an alert group (for example, command line processes). The Cylance Assistant
leverages rich cybersecurity knowledge sources to provide valuable information to aid you in your threat investigations.
- To access theCylance Assistantin the Alerts view, you must contact yourBlackBerryaccount representative to request enablement of this feature.
- Currently, theCylance Assistantis available forCylanceOPTICSalerts only. Future updates will extend this functionality to otherCylanceproducts and services.
- BlackBerrydoes not use any customer data to train the AI that powers theCylance Assistant.
- In the management console, on the menu bar, clickAlerts.
- On theProductcolumn, click
and select CylanceOPTICS. - Click an alert group.TaskStepsGenerate a summary analysis of the alert group.
- In the left pane, in theOverviewsection, clickAlert Summary.
- Click
to copy the summary.
Generate an analysis of an instigating or target process for the alert group.- In the left pane, scroll down to view relationships between instigating and target objects.
- Hover over an instigating or target process artifact and click
. - Click to copy the analysis.
Generate an analysis of an instigating or target process for a specific alert in the group.- Click an individual alert in the alert group.
- In the right pane, scroll down to view relationships between instigating and target objects.
- Hover over an instigating or target process artifact and click.
- Click to copy the analysis.