logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Enterprise EDR: How to filter Cloud (Initial) and Cloud (Current) reputations in an investigate query

Enterprise EDR: How to filter Cloud (Initial) and Cloud (Current) reputations in an investigate query

Environment

  • Enterprise EDR Web Console: All Versions

Objective

Filter Investigate page Processes tab results based on Cloud (Initial) and Cloud (Current) reputation fields

Resolution

Leverage the following search field to include or exclude processes with a specified Cloud (Initial) or Cloud (Current) reputation:
  • Include a process with a specified Cloud (Initial) or Cloud (Current) reputation 
    • process reputation:<reputation value>
  • Exclude a process with a specified Cloud (Initial) or Cloud (Current) reputation
    • -process reputation:<reputation value>

Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎08-27-2020
Views:
320
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.