IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Is there a minimum event collection and reporting in EDR sensors?

EDR: Is there a minimum event collection and reporting in EDR sensors?

Environment

  • EDR Sensor: All versions
  • EDR Server: All versions

Question

If every type of Event Collection in the Sensor Group options is unchecked, should the console list any events from the sensors in that sensor group?

Answer

There is a minimum baseline of event collection that gets reported in the console for main OS processes like svchost.exe in Windows or bash in Linux.

Labels (2)
Tags (3)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-22-2024
Views:
135
Contributors