Does Endpoint Standard track registry modifications?

Products

• Carbon Black Cloud Endpoint Standard

Issue/Introduction

Are registry modifications tracked by the CBC sensor in ORGs that are only provisioned for Endpoint Standard?

Environment

• Carbon Black Cloud Endpoint Standard: Current Version
• Carbon Black Cloud Windows Sensor: All Versions
• Microsoft Windows OS: All Supported Versions

Resolution

No, tracking and monitoring raw file event data like registry modifications (regmods) are included with the Enterprise EDR entitlement and is not available with Endpoint Standard alone.