Enterprise EDR: Is There a Way to Restore a Deleted Custom Watchlist

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Is There a Way to Restore a Deleted Custom Watchlist?

Environment

• Carbon Black Cloud Console: All Versions
• Enterprise EDR (EEDR) Sensor: 3.4.x and Higher

Resolution

There is currently no way to restore a custom watchlist that has been deleted. Once a delete request is issued, the watchlist is also deleted from the backend SQL Database and is unable to be restored.

Additional Information

Please share this via Voice of the Customer to see the ability to restore a deleted watchlist added in a future version of Enterprise EDR:
https://community.carbonblack.com/t5/Knowledge-Base/All-Products-How-to-submit-a-new-feature-request/ta-p/72934