Environment
- Endpoint Standard Sensor: All Supported Versions
- Carbon Black Cloud: All Supported Versions
- Apple macOS: All Supported Versions
Question
How does the sensor suppress events in order to reduce event noise?
Answer
- To avoid excessive traffic, the repetitive, similar, events are suppressed, not reported to the cloud.
- The suppression interval for process creation events is six hours.
Related Content
