CB PSC: Does the Audit Log Create an Entry When an Individual Sensor is Taken Out of Bypass?

Products

• Carbon Black Cloud Audit and Remediation (formerly Cb Live Ops)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When an individual sensor is instructed to exit bypass status, will an audit log entry be created?

Environment

• CB PSC Web Console: All Versions
  • CB Defense
  • CB ThreatHunter
  • CB LiveOps
• CB PSC Sensor: All Supported Versions
  • Microsoft Windows
  • Mac OS
  • Linux

Resolution

No, there will not be a message in the audit log when an individual sensor is moved out of bypass.