CB Response: Is there a Windows Event Logged When Uninstalling the Sensor?
search cancel

CB Response: Is there a Windows Event Logged When Uninstalling the Sensor?

book

Article ID: 289798

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When uninstalling the CB Response sensor, is there a Windows Event created?

Environment

  • CB Response Sensor: All Versions
  • Microsoft Windows: All Support Versions

Resolution

No, because there is an uninstallation .exe there isn't a Windows Event created that correlates directly to sensor uninstallation.

Additional Information

  • Applications uninstalled via add/remove programs generally do not show in the Windows Events unless uninstalled via msiexec.