Cb Response: How To Disable a Threat Intelligence Feed For Specific Hosts Using the Cb Response UI

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to disable a threat intelligence feed for a specific host using the Cb Response UI.

Environment

• Cb Response Server: Version 6.x

Resolution

• Threat intelligence feeds cannot be disabled per host.
• Threat report alerts can be marked as false positives and the corresponding threat report set to be ignored for future occurrences.