CB Threathunter: Why do some alerts show as 'Alert triage'?
book
Article ID: 285560
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
On selecting some CB ThreatHunter console alerts a CB Defense alert triage page is displayed and not a CB ThreatHunter process analysis page.
Environment
CB ThreatHunter: All Versions
Resolution
The method of alert generation will determine how the alert is displayed. CB Analytics alerts will go to alert triage and Watchlist alerts will go to process analysis.