EDR: What is the order of priority for event ingestion?
search cancel

EDR: What is the order of priority for event ingestion?

book

Article ID: 290053

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How does EDR prioritize incoming data from sensors?

Environment

  • EDR Server: All Supported Versions

Resolution

The order of priority for event ingestion is as follows:
  1. Tamper Events 
  2. Events data (regmods, netconns, etc.) 
  3. Binary data