logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: How to remove IOCs from custom feed report

EDR: How to remove IOCs from custom feed report

Environment

  • EDR server: All versions

Objective

Remove IOCs from a custom feed report

Resolution

  • To remove some IOCs from a report
  1. Remove IOCs from the report
  2. Update the timestamp of the report
  3. Optional: Force a feed sync - EDR: How to execute an immediate full feed sync
  • To remove an entire report
  1. Remove all IOCs from the report
  2. Update the timestamp rather than removing the report
  3. Optional: Force a feed sync - EDR: How to execute an immediate full feed sync

Related Content


Labels (1)
Labels:
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎09-09-2020
Views:
793
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.