CB Defense: Is there a mechanism to detect and notify of a breach of logon controls?

[#1]

Environment

• CB Defense Web Console: All Versions

Question

Is there a built in mechanism to CB Defense to alert on a potential or successful breach of logon controls?

Answer

Currently there is no built in feature to notify of a loss of logon controls.

Additional Notes

• There is an open Feature Request to have the idea added into the product here: CB Defense: Audit Log Entries for failed login attempts 
• Alternatively you can leverage our Audit Log API to retrieve this information: https://developer.carbonblack.com/reference/carbon-black-cloud/cb-defense/latest/rest-api/