CB Response: Is there a Windows Event Logged When Uninstalling the Sensor?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When uninstalling the CB Response sensor, is there a Windows Event created?

Environment

• CB Response Sensor: All Versions
• Microsoft Windows: All Support Versions

Resolution

No, because there is an uninstallation .exe there isn't a Windows Event created that correlates directly to sensor uninstallation.

Additional Information

• Applications uninstalled via add/remove programs generally do not show in the Windows Events unless uninstalled via msiexec.