Is There a Way to Restore a Deleted Custom Watchlist

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Is There a Way to Restore a Deleted Custom Watchlist?

Environment

• Carbon Black Cloud Console: All Versions
• Enterprise EDR (EEDR) Sensor: 3.4.x and Higher

Resolution

• There is currently no way to restore a custom watchlist that has been deleted.
• Once a delete request is issued, the watchlist is also deleted from the backend SQL Database and is unable to be restored.
• However a watchlist can be rebuilt by creating a new watchlist and adding the reports that were being used to it. 
• The reports attached to a watchlist are not deleted when the watchlist is deleted.