Environment
Carbon Black Cloud (formerly CB PSC): All versions
Endpoint Standard (Formerly CB Defense): All versions
Question
Which username information does logs writing to SIEM contain ?
Answer
SIEM would only show the information for the "Installed by" user . It does not have a filter for the current/last active users . This is by design .
Additional Notes
#CarbonBlackCloud#EndpointStandard