Event Reporting Exclusions impact Carbon Black Cloud Enterprise EDR process event reporting but not sensor operations.
Impacted:
- Reporting of selected process event types
- Relevant Watchlist detections and the reporting of hits and alerts associated with those detections
Not Impacted:
- Reporting of process creations, including child process (childproc) events, and terminations
- Sensor operations associated with Carbon Black Cloud Enterprise EDR, such as:
- Sensor tamper detection and protection
- Hash bans
- Hash generation
- Reputation reporting
- Signature reporting