Automating Reports in App Control

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Can the activity of Software Rules, Events be reported on a time-frame basis, for example a monthly report of File Integrity Control rule activity?

Environment

App Control Console: All Supported Versions

Resolution

Currently there is no feature within the App Control Console that would allow for automatically sending specific Saved Views, Filtered Events or summaries for Custom Rule activity. However, the Console can be configured for External Event Logging which may allow for some other dedicated SIEM or SYSLOG software to help with automation and analysis.