Is There a Way to Restore a Deleted Custom Watchlist
search cancel

Is There a Way to Restore a Deleted Custom Watchlist

book

Article ID: 290216

calendar_today

Updated On:

Products

Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Is There a Way to Restore a Deleted Custom Watchlist?

Environment

  • Carbon Black Cloud Console: All Versions
  • Enterprise EDR (EEDR) Sensor: 3.4.x and Higher

Resolution

  • There is currently no way to restore a custom watchlist that has been deleted.
  • Once a delete request is issued, the watchlist is also deleted from the backend SQL Database and is unable to be restored.
  • However a watchlist can be rebuilt by creating a new watchlist and adding the reports that were being used to it. 
  • The reports attached to a watchlist are not deleted when the watchlist is deleted.