Enterprise EDR: Is There a Way to Restore a Deleted Custom Watchlist

[#1]

Environment

• Carbon Black Cloud Console: All Versions
• Enterprise EDR (EEDR) Sensor: 3.4.x and Higher

Question

Is There a Way to Restore a Deleted Custom Watchlist?

Answer

There is currently no way to restore a custom watchlist that has been deleted. Once a delete request is issued, the watchlist is also deleted from the backend SQL Database and is unable to be restored.

Additional Notes

Please share this via Voice of the Customer to see the ability to restore a deleted watchlist added in a future version of Enterprise EDR:
All Products: How to submit a new feature request

Related Content

3.4 Sensor Release Information
Cb ThreatHunter: Can I Migrate my Watchlist from Cb Response?