CB Response: Can Response Detect When Programs Are Installed?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Can Response be used to detect when specific software is installed?

Environment

• CB Response: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

Response can be used to detect when software is installed by using a watchlist to monitor for the specific regmons that the installation will create.