CB ThreatHunter: Is it possible to group by process on the Investigate page?

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When conducting an investigation in CB ThreatHunter, can the events shown be grouped by process?

Environment

• Predictive Security Cloud (PSC) Console: All Versions
  • CB ThreatHunter

Resolution

No. With current functionality this is not possible. To see this feature added in a future version of the product, please vote for the post below.

https://community.carbonblack.com/t5/Idea-Central/Feature-Request-Group-processes/idc-p/89631

Additional Information

• This article will be updated as there are changes to this functionality
• Current grouping options are by threatID on the Alerts page and by AlertID on the Investigate page