IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black Cloud: What field can be used to determine the observed / threat alert categories?

Carbon Black Cloud: What field can be used to determine the observed / threat alert categories?

Environment

  • Carbon Black Cloud: All versions

Question

When forwarding events, what field shows the observed / threat alert categories? 

Answer

As of APIv6, this information is stored in the 'category' field, the description will vary by where it is viewed
UIThreatObserved
APITHREATMONITORED
Date ForwarderWARNINGNOTICE

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-21-2021
Views:
418
Contributors