Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Cylance Endpoint Security Data Collection and Use
  4. How Cylance Endpoint Security products collect and use data
  5. How CylancePROTECT Desktop collects and uses data

How
CylancePROTECT Desktop
 collects and uses data

For complete information about this product, see the Cylance Endpoint Security docs.
Item
Data collection and use
Malware detection and remediation
  • CylancePROTECT Desktop
     uses machine learning to analyze executable files to:
    • Prevent malware from executing on device endpoints
    • Conduct malware risk scoring
    • Classify malware
    • Improve the effectiveness of
      BlackBerry
       products
  • The collection of potentially malicious executable files is based on your configuration of the product. You can configure the product to allow or prevent the transfer of the following data:
    • Hostname
    • FQDN
    • IP address
    • MAC address
    • File owner
    • File path
    • Username
  • When a potentially malicious executable file is uploaded, it is transferred to the
    CylancePROTECT
     cloud services (located in Northern Virginia, US) for scoring. These files are stored separately from your organization’s tenant, and any attribution data is de-identified prior to analysis.
  • BlackBerry
     does not share collected files with third parties.
Collection of endpoint data
BlackBerry
 collects and processes the following endpoint data to identify and protect the device from threats:
  • Hostname
  • FQDN
  • IP addresses
  • MAC addresses
  • Name of the user most recently logged in
Data storage and retention
  • BlackBerry
     uses the data described above to facilitate the performance of the license agreement under which
    BlackBerry
    ’s services and products are offered. The data is shared only with necessary third-party services that are needed to fulfill the intended purpose of the services.
  • BlackBerry
     will not sell, lease, or otherwise distribute this information.
  • Endpoint data is removed at the end of the contract. Administrators can remove data using the management console.
  • Potentially malicious executables are retained indefinitely. No data is retained that can be used to associate the executable with an individual or organization.
  • The endpoint data that is collected is stored in
    Amazon Web Services
    , in a location of the customer's choice:
    • Northern Virginia, US
    • Oregon, US
    • Frankfurt am Main, Germany
    • Sao Paulo, Brazil
    • Tokyo, Japan
    • Sydney, Australia