CB Protection: Does the CB Protection Agent track registry changes?

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Does the CB Protection Agent track registry changes?

Environment

• CB Protection Agent: All Versions
• Microsoft Windows: All Versions

Resolution

Yes, the CB Protection Agent does track registry modifications, but does not report the majority to the console. 

Additional Information

By default, registry tracking or inforcement is limited to Rapid Configs, Tamper Protection, and any rules under the Registry Rules tab. Additional rules can be added in the Registry Rules tab to expand this.