When set to True , this parameter enables notifications for binaries that are entirely new to Carbon Black EDR, or new to specific sensor hosts or sensor groups.

Default: False

One notification event occurs for each of the following cases:

  • The binary is completely new to the sensors reporting to this server.
  • The binary is new to the host that reported it.
  • The binary is new to the sensor group to which the reporting host belongs. This means that one newly discovered binary can trigger up to three notifications. Notifications are sent to syslog as log messages.