Carbon Black Cloud: Is there a way to sort by Threat ID when Event Data is sent to QRadar?
book
Article ID: 290306
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Is there a way to sort by Threat ID in QRadar?
Environment
Carbon Black Cloud Console
Resolution
No, it is not yet available to sort by Threat ID. As of November 2021, IBM will be releasing an update to the App to support this, but Carbon Black does not have an ETA for this.