CB Protection: How to Alert on File Analysis Results

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to alert on the results of a file analysis.

Environment

• CB Protection Server: All Supported Versions
• File Analysis Connector Enabled

Resolution

1. In the console navigate to Tools > Alerts. 
2. Create a new alert with the Mail Template of "Template for File"
3. Set the trigger state to:
   • Event Subtype is File Analysis Complete
   • File Property is Analysis Results: <Analysis Name> is <Result>
4. Save the alert. 

Additional Information

Further information can be found in the CB Protection User Guide here