Audit and Remediation: Can LiveQuery Be Used to Access OSQuery Evented Tables?
book
Article ID: 289377
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Does LiveQuery allow access to evented tables?
Environment
- Carbon Black Cloud Sensor: All Supported Versions
- Audit and Remediation: All Versions
Resolution
LiveQuery cannot be used to access evented tables
Feedback
thumb_up
Yes
thumb_down
No