Event Reporting and Sensor Operation Exclusions Impact

Event Reporting and Sensor Operations Exclusions impact Carbon Black Cloud Enterprise EDR process event reporting and sensor operations.

Impacted:

• Reporting of selected process event types
• Relevant Watchlist detections and the reporting of hits and alerts associated with those detections
• Sensor operations associated with Carbon Black Cloud Enterprise EDR, except for sensor tamper detection and protection, such as:
  • Hash bans
  • Hash generation
  • Reputation reporting
  • Signature reporting

Not Impacted:

• Reporting of process creations, including child process (childproc) events, and terminations
• Sensor tamper detection and protection