Enterprise EDR: Will policy rules affect Enterprise EDR Watchlist and alert tuning?
book
Article ID: 284848
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Can policy rules be used to to tune alert and watchlist noise?
Environment
- Carbon Black Cloud: All supported versions
- Enterprise EDR
- Endpoint Enterprise
Resolution
Policy will have no affect on the Enterprise EDR data stream therefore cannot be used to tune noisy alerts and watchlists
Feedback
thumb_up
Yes
thumb_down
No