CB Response: Can Response Detect When Programs Are Installed?
book
Article ID: 289258
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Can Response be used to detect when specific software is installed?
Environment
- CB Response: All Supported Versions
- Microsoft Windows: All Supported Versions
Resolution
Response can be used to detect when software is installed by using a watchlist to monitor for the specific regmons that the installation will create.
Feedback
thumb_up
Yes
thumb_down
No