EMET threat reports are delivered as part of the EMET Protection Feed.

If this feed is enabled, these reports are searchable and processes with an EMET mitigation event are tagged with “EMET Protection Feed” and get a score of 90. See “Threat Intelligence Feed Scores” in the Carbon Black EDR User Guide.

To view EMET threat reports:

  1. Log into Carbon Black EDR.

  2. On the navigation menu, click Threat Intelligence .

  3. On the Threat Intelligence Feeds page, scroll to the EMET Protection panel and click the Threat Reports link.

    The EMET threat panel displaying the threat reports link

  4. The Search Threat Reports page appears with the results of the EMET reports search (labeled as cbemet in the Description column).

    The search treat reports page displaying the cbemet threat report and the details link

    You can click the Details link for any report in the table to get additional information.

    See “Searching for Threat Reports” in the Carbon Black EDR User Guide.