Cb Response: How To Disable a Threat Intelligence Feed For Specific Hosts Using the Cb Response UI
book
Article ID: 287275
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
How to disable a threat intelligence feed for a specific host using the Cb Response UI.
Environment
- Cb Response Server: Version 6.x
Resolution
- Threat intelligence feeds cannot be disabled per host.
- Threat report alerts can be marked as false positives and the corresponding threat report set to be ignored for future occurrences.
Feedback
thumb_up
Yes
thumb_down
No