IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB ThreatHunter: How to filter out data with unknown event type counts

CB ThreatHunter: How to filter out data with unknown event type counts

Environment

  • CB ThreatHunter Console: All Versions

Objective

Filter out data that contains an (unknown) field for the event type count e.g. regmods, filemods, etc.

Resolution

On the investigate page within the ThreatHunter console use the following search syntax
  • -legacy:true

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎03-26-2019
Views:
445
Contributors