Enterprise EDR Console: How to enable watchlist alerting

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Configure alerts for enabled watchlists

Environment

• Enterprise EDR Console: All Supported Versions

Resolution

1. On the Watchlists page, select a watchlist
2. Click Take Action, and then click Edit
3. You can choose to Alert on hit and Include historical data

• Alert on hit - Receive an alert when an IOC is detected in your environment. Easily take action from the Alerts page.
• Include historical data - Get more insight by evaluating historical data.

Additional Information

View watchlist alerts on the Alerts page by selecting Watchlists in the alerts filter