CB Protection: Does the CB Protection Agent track registry changes?
book
Article ID: 288728
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
Does the CB Protection Agent track registry changes?
Environment
CB Protection Agent: All Versions
Microsoft Windows: All Versions
Resolution
Yes, the CB Protection Agent does track registry modifications, but does not report the majority to the console.
Additional Information
By default, registry tracking or inforcement is limited to Rapid Configs, Tamper Protection, and any rules under the Registry Rules tab. Additional rules can be added in the Registry Rules tab to expand this.