Certificates in External Views

You can use public views into the Carbon Black App Control database of files and events as an alternative to the console.

You can create your own reporting and data analysis solutions by using these public views. The certificate-related event subtypes may be included in the ExEvents view. In addition, certificate metadata is included with file information in the following views:

• ExFileCatalog – Metadata for all unique hashes
• ExFileInstances – Metadata of all file instances on all computers
• ExDeletedFileInstances – Metadata of all deleted file instances

See Live Inventory SDK: Database Views for more information about accessing the external views of the Carbon Black App Control database.