IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black Cloud: Are Detections, Terminates, and Denies Reported to the Windows Event Logs?

Carbon Black Cloud: Are Detections, Terminates, and Denies Reported to the Windows Event Logs?

Environment

  • Microsoft Windows: All Supported Versions

Question

Are detections, terminate and deny actions, and malware detections reported by the sensor to the Windows event logs?

Answer

  • Deny and terminate actions always create an event in the Windows event logs.
  • Malware detections create an event so long as the repuation is either KNOWN_MALWARE, SUSPECT_MALWARE , or PUP

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-12-2021
Views:
582