App Control: Does the execution of the approved files generate events?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the execution of the approved files generate events?

Environment

• App Control Console: All Versions

Resolution

No. The UI is unable to generate events on the execution of locally or globally approved files, otherwise the event list would get overwhelmed.

Additional Information

• While there is no ideal way to run this,  a meter can be created to monitor specific file executions.

NOTE: This may cause performance impact depending on the volume

• If further assistance is required on this configuration, contact your CB account team to discuss about PS engagement.