Enterprise EDR: Why am I seeing an increase in alerts for the "Carbon Black TOR" watchlist on or after 2/21/2022?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Why am I seeing an increase in alerts for the "Carbon Black TOR" watchlist?

Environment

• Carbon Black Cloud Console
• Enterprise EDR

Resolution

• The "TOR Exit Nodes" watchlist is being depricated on 2/21/2022 and all subscribed Orgs will be subscribed to the new "Carbon Black TOR" watchlist
• Due to the updates made in the new watchlist, an increase in alerts may occur
• More details on this change can be found in this community post

Additional Information

If you have additional questions or concerns regarding this increase in alerts please submit a support ticket.