IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB Defense: Is there a way to enable alerts for all Blocking actions?

CB Defense: Is there a way to enable alerts for all Blocking actions?

Environment

  • CB Defense Console: All Versions

Question

Can alerts be generated for all block events?

Answer

No, alerts cannot be configured to create every time a blocking event occurs

Additional Notes

  • Email notifications can be set to trigger any time a Deny (Block) or Terminate action is applied. Duplicate emails may be sent if an event has a high enough score to trigger a separate email notification
  • To prevent alert fatigue, many blocking events do not trigger alerts. What determines if an alert should be triggered or not cannot be shared for security reasons

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-28-2019
Views:
538
Contributors