Carbon Black Enterprise Protection (Bit9) Content Pack
12 Sep 23:12
12 Sep 23:09
to rate this add-on.
When applying this content pack I had an issue with the Dashboard Widgets populating with information coming in from messages. I had to edit each of the widgets.
In the "Search Query" Line you'll have to make 2 changes to the line. The following is a before change and after so you can see the differences.
Before: source:subtype:"New unapproved file to computer"
After: source:servername AND subtype:"New unapproved file to computer"
Note: servername is the "source" / servername of your Carbon Black Protect/Bit9 server.