logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Enterprise EDR: Are Auth Events in Investigate Page Supported for Linux and macOS Sensors?

Enterprise EDR: Are Auth Events in Investigate Page Supported for Linux and macOS Sensors?

Environment

  • Enterprise EDR: All Suppported Versions
  • Linux: All Supported Versions
  • macOS: All Supported Versions

Question

Are Auth Events in Investigate page supported for Linux and macOS sensors?

Answer

No, Carbon Black Cloud Enterprise EDR features Identity Intelligence which provides visibility into authentication events that occur on Windows sensor devices currently.

Additional Notes

  • This is supported by Carbon Black Cloud Windows Sensor 3.9.1+ running on Windows 10.0.15063+.
  • The Auth Events tab is only available for Carbon Black Cloud Enterprise EDR customers.

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎01-15-2024
Views:
159
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.