Carbon Black Cloud: What types include the process_username in the Data Forwarder?

[#1]

Environment

• Carbon Black Cloud: All Versions
• Data Forwarder

Question

What types sent to the SIEM by the Data Forwarder include information on what user ran a process, i.e., process_username?

Answer

The event and alert types that include the process username can be found in the latest Data Forwarder Fields guide
Data Forwarder Fields - Carbon Black Developer Network
 

Related Content

Carbon Black Cloud: What Fields Sent Over the Data Forwarder?