Cb Response: Does Response track who created, modified, or deleted watchlists?
book
Article ID: 289047
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Does Response track who created, modified or deleted watchlists?
Environment
Cb Response Server: All Versions
Resolution
No, we do not track that kind of information in the audit logs, but the 'watchlist_entries' Postgres table does keep track of when watchlists were created.