Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: What types include the process_username in the Data Forwarder?

Carbon Black Cloud: What types include the process_username in the Data Forwarder?

Environment

  • Carbon Black Cloud: All Versions
  • Data Forwarder

Question

What types sent to the SIEM by the Data Forwarder include information on what user ran a process, i.e., process_username?

Answer

The event and alert types that include the process username can be found in the latest Data Forwarder Fields guide
Data Forwarder Fields - Carbon Black Developer Network
 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎04-19-2022
Views:
109
Contributors