Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Why Is The Console Not Displaying The Full Command Line Of The Process In The Events?

App Control: Why Is The Console Not Displaying The Full Command Line Of The Process In The Events?

Environment

  • App Control Server: 8.5.4 and Higher

Question

Why is the App Control console not displaying the full command line of the process in the events?

Answer

  • Some command line is not always caught by the App Control agent, as the agent may not consider it "interesting".
  • The agent may see a script or powershell running, but have no visibility into what is running within the script or powershell.
  • The agent sees process data, however it is not necessarily shown in the UI; this is why the data is seen in the agent logs but not the UI itself.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎03-22-2021
Views:
250