EDR: What is the order of priority for event ingestion?
book
Article ID: 290053
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
How does EDR prioritize incoming data from sensors?
Environment
- EDR Server: All Supported Versions
Resolution
The order of priority for event ingestion is as follows:
- Tamper Events
- Events data (regmods, netconns, etc.)
- Binary data
Feedback
thumb_up
Yes
thumb_down
No