Cb Response: Does Response track who created, modified, or deleted watchlists?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Does Response track who created, modified or deleted watchlists?

Environment

• Cb Response Server: All Versions

Resolution

No, we do not track that kind of information in the audit logs, but the 'watchlist_entries' Postgres table does keep track of when watchlists were created.