Here's another "VS" question... the price on Carbon Black has come down to something that is very close to Kaspersky so I am considering a replacement. We are an SMB so never could afford the "Lamborghini" AV. Kaspersky has served us well over the last 8 years and does a fine job blocking all kinds of threats. We primarily use it to protect Windows VM's and a few workstations. However, I can't ignore the tech buzz about all these newfangled security threats were traditional AV won't protect you.
I did a CB demo and it was indeed impressive but I am still hesitant. The rep said they check against known lists but they do not do the traditional file scanning which has me a bit worried that it will miss something. I also saw folks saying it required a lot of management because it's all based on whitelisting. I am a sole SysAdmin so I don't...