Enterprise EDR: Will policy rules affect Enterprise EDR Watchlist and alert tuning?
search cancel

Enterprise EDR: Will policy rules affect Enterprise EDR Watchlist and alert tuning?

book

Article ID: 284848

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Can policy rules be used to to tune alert and watchlist noise?

Environment

  • Carbon Black Cloud: All¬†supported versions
    • Enterprise EDR
    • Endpoint Enterprise

Resolution

 Policy will have no affect on the Enterprise EDR data stream therefore cannot be used to tune noisy alerts and watchlists