CB Response: Is there a Windows Event Logged When Uninstalling the Sensor?
book
Article ID: 289798
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
When uninstalling the CB Response sensor, is there a Windows Event created?
Environment
- CB Response Sensor: All Versions
- Microsoft Windows: All Support Versions
Resolution
No, because there is an uninstallation .exe there isn't a Windows Event created that correlates directly to sensor uninstallation.
Additional Information
- Applications uninstalled via add/remove programs generally do not show in the Windows Events unless uninstalled via msiexec.
Feedback
thumb_up
Yes
thumb_down
No