CB Response: How to find and unsubscribe from a Feed's email

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Find a feed sending emails and unsubscribe

Environment

• CB Response Server: All Versions

Resolution

1. Determine the name of the feed from the Feed field of the email
2. In the Response UI, go to Threat Intelligence
3. Locate the matching feed
4. Un-check "Email Me On Hit"

Additional Information

• The user receiving the email must be the one to unsubscribe in the UI
• The Feed name in the email may be longer than the name in the UI. For example, a hit on the Endpoint Visibility feed will appear as "Carbon Black Endpoint Visibility Feed" in the email