EMET Configuration Searches

You can search for processes that are on a host that either has or does not have an EMET configuration related to that process.

You can thereby determine whether a process might have been reported on a system that did not have endpoint protection enabled. The EMET configuration search option is available on the Add Criteria menu on the Search Processes page .

For more information on the Search Processes page , see “Process Search and Analysis” in the Carbon Black EDR User Guide.

This search will help you determine if EMET is installed on a host and help you determine process-specific protections.