Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Environment

CB ThreatHunter Web Console: All Versions

Question

What is the structure of a Watchlist Alert ID?

Answer

A Watchlist Alert ID has three main components:

Process GUID

{ORG_KEY}-00e23c7b-000013b4-00000000-1d5df61ab230d55

Report ID

CFnKBKLTv6hUkBGFobRdg-565577

IOC ID

565577-0

Combined the above three main components will form the following structure:

Alert ID: {ORG_KEY}-00e23c7b-000013b4-00000000-1d5df61ab230d55-CFnKBKLTv6hUkBGFobRdg-565577

Knowledge Base

CB ThreatHunter: What is the structure of a Watchlist Alert ID?

CB ThreatHunter: What is the structure of a Watchlist Alert ID?

Environment

Question

Answer

Related Content

Carbon Black Cloud

Enterprise EDR

Knowledge Base

CB ThreatHunter: What is the structure of a Watchlist Alert ID?

CB ThreatHunter: What is the structure of a Watchlist Alert ID?

Environment

Question

Answer

Related Content

Carbon Black Cloud

Enterprise EDR

Thank you for your feedback.

Thank you for your feedback.