Event Reporting Exclusions impact Carbon Black Cloud Enterprise EDR process event reporting but not sensor operations.

Impacted:

  • Reporting of selected process event types
  • Relevant Watchlist detections and the reporting of hits and alerts associated with those detections

Not Impacted:

  • Reporting of process creations, including child process (childproc) events, and terminations
  • Sensor operations associated with Carbon Black Cloud Enterprise EDR, such as:
    • Sensor tamper detection and protection
    • Hash bans
    • Hash generation
    • Reputation reporting
    • Signature reporting