Enterprise EDR: Is There A Way To Tell Which Component Of An IOC Triggered An Alert?
book
Article ID: 290241
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Is There A Way To Tell Which Specific Component Of An IOC Triggered An Alert?
Environment
Enterprise EDR (Formerly CB ThreatHunter) Web Console: All Versions
Resolution
No. Currently there is no way to tell which component(s) were responsible, only the name of the IOC involved
Additional Information
A feature request has been added over inĀ 'Idea Central' on the UeX, at the following link. Please feel free to vote on this...
https://community.carbonblack.com/t5/Idea-Central/Enterprise-EDR-Add-the-ability-to-determine-which-component-of/idi-p/94589#M10237
Feedback
thumb_up
Yes
thumb_down
No