Enterprise EDR Console: How to enable watchlist alerting
book
Article ID: 290389
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
Configure alerts for enabled watchlists
Environment
- Enterprise EDR Console: All Supported Versions
Resolution
- On the Watchlists page, select a watchlist
- Click Take Action, and then click Edit
- You can choose to Alert on hit and Include historical data
- Alert on hit - Receive an alert when an IOC is detected in your environment. Easily take action from the Alerts page.
- Include historical data - Get more insight by evaluating historical data.
Additional Information
View watchlist alerts on the Alerts page by selecting Watchlists in the alerts filter
Feedback
thumb_up
Yes
thumb_down
No