Carbon Black EDR Classifier

Classifies Carbon Black EDR's alerts

Carbon Black Enterprise Response Classification

Details

ID	`Carbon Black EDR Classifier`
Type	classification
Version	-1
From Version	6.0.0
Default Incident Type	Carbon Black EDR
Feed	No

Key Type Map

Key	Incident Type
`Carbon Black Process Blocking`	Carbon Black EDR

Source

classifier-carbonblackedr.json

Download History Raw

{
    "defaultIncidentType": "Carbon Black EDR",
    "description": "Classifies Carbon Black EDR's alerts",
    "feed": false,
    "id": "Carbon Black EDR Classifier",
    "keyTypeMap": {
        "Carbon Black Process Blocking": "Carbon Black EDR"
    },
    "name": "Carbon Black EDR Classifier",
    "propagationLabels": [
        "all"
    ],
    "transformer": {
        "complex": null,
        "simple": "description"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.0.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}